Has this gotten any easier to do? I set it up a few years ago, it was painful to do and maintain so I let it slide. You were writing all sorts of scripts to specify the passthrough devices and then they’d stop working so you had to track down what was failing and update. Then there was iommu so you had to be careful which groups you added devices to.