[rolandr]

I do not believe there is are any Intel chips that give you VT-d (IOMMU) and do not require a firmware blob. Blame Intel for that situation.

I think AMD has open sourced most of their BIOS, and a lot more of their hardware supports IOMMU anyway. Maybe that is a more fruitful direction to consider.

[kriro]

You are absolutely right. In fact I didn't know that Intel ME is that evil. Interesting (a bit hard to follow imo) talk from the recent CCC: https://media.ccc.de/v/32c3-7352-towards_reasonably_trustwor...