Solved Assign GPU / graphics card to jail

[tOsYZYny]

Is it possible to assign a graphics card to a jail? I have distilled my host system down as much as possible and am wondering if I can run Xorg entirely in a jail where the host does not have Xorg at all.

 

[yuripv79]

You can't "assign" the card to a jail as you'll need to load the drivers on the host side anyway; you could try passing through the resulting device nodes in /dev/.

If you need even better isolation, use a VM with PCI passthrough.

 

[tOsYZYny]

I don't believe it, that worked, and the host still has functional ttys, could it really be that simple:

/etc/jail.conf.d/workstation.conf

devfs_ruleset="210";

/etc/devfs.rules

[jail_devfs=210]
add path 'dri*' unhide
add path 'drm*' unhide
add path 'dsp*' unhideadd path 'mixer*' unhide
add path 'speaker*' unhide

On the host system, I installed the drivers as I normally would.