[dmm]

> dropped it because of bad graphics performance (only software rendering supported, many frame drops when watching HD videos on YT)

Around Firefox 92 or 93 the new GPU-based renderer ported from Servo was made default and performance under Qubes became much worse. Unfortunately, it seems applications increasingly assume the presence of video acceleration and don't prioritize software rendering.

[josephcsible]

Isn't it reasonable for applications to assume that, now that virtually all hardware has it, even super-cheap computers like the Raspberry Pi?

[adastra22]

The issue for Qubes is security. GPUs can be used to subvert basically all the otherwise hardware-enforced security protections.

[creole_wither]

In a desktop, couldn't you assign a GPU to one video machine and in that scenario would there still be a security problem when there is only one VM using it?

[adastra22]

It’s not about virtual machines. GPUs typically have direct memory access to pretty much all system RAM. There exist PCIe mitigations, but the review does not meet up to Qubes security standards.

[halJordan]

Yes, this is what qubes would probably suggest as the solution.

[Narishma]

The hardware may be there, but not necessarily the drivers.

[zamadatix]

The drivers are fine for GPU accelerated rendering of the app surfaces, even on the Pi. Hell, the drivers are even there >98% of the time for accelerated decode of the video format itself to boot.

Qube's unique choice in software only rendering for user applications is one born out of the isolation goals for security, not what the software/drivers/hardware could do.

[fsflover]

> even on the Pi

Only proprietary ones, so not for everyone...

[zamadatix]

Pi 1-3 https://docs.mesa3d.org/drivers/vc4.html

Pi 4-5 https://docs.mesa3d.org/drivers/v3d.html

[fsflover]

> Broadcom never released a public specification for the V3D 3.x or 4.x series.

So the support must be worse if you prefer free drivers?

[fulafel]

Yes. Besides Qubes users, a big population of software rendering users is people who have old and/or buggy drivers that are blacklisted by Firefox.

[usr1106]

I understand GPUs are a security nightmare. If you want to have some understanding of your security, don't use a GPU.

[irundebian]

Yeah, if you really care about security, only use computer which use line printers as output mechanisms.

[dmm]

It's totally reasonable, just unfortunate for this use-case.