

What’s the GPU have to do with proper sandboxing of a crack? Or are you just being opinionated and offering unsolicited advice?
Also the DRM absolutely has no fucking clue if it’s running in a qemu or on a spinning rust IDE SCSI from 1992.
Lastly the whole point of a bypass crack is that the DRM is bypassed… it’s being told what system it’s running on.

Thing 0 you can use qm terminal
Thing 1 use ZFS no need for LVM
Thing 2 see above for zfs set share nfs
Thing 3 spice vnc is built in
Thing 4 you should check out QubesOS if you haven’t already…
You should especially look at https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_13_Trixie