Neato! Many years back I was playing with Xpra for this, but it was in the days before either Docker or useful seccomp. Glad to see something making progress here.<p>Have you looked at OpenGL virtualization e.g. Virgil (<a href="https:&#x2F;&#x2F;virgil3d.github.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;virgil3d.github.io&#x2F;</a> , <a href="https:&#x2F;&#x2F;www.kraxel.org&#x2F;blog&#x2F;tag&#x2F;virgl&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.kraxel.org&#x2F;blog&#x2F;tag&#x2F;virgl&#x2F;</a>) for that problem? The idea is to use Gallium to give them just enough access to get host 3D acceleration, but not direct access to the graphics card.