Qubes OS

Qubes OS is a security-focused desktop operating system that aims to provide security through isolation.

To get Trezor running under Qubes OS, you'll need to perform the following:

in Dom0:

sudo vim /etc/qubes-rpc/policy/trezord-service

add this line:

$anyvm $anyvm allow,user=trezord,target=sys-usb

in sys-usb:

sudo vim /usr/local/etc/qubes-rpc/trezord-service

add this line:

socat - TCP:localhost:21325

in any AppVM that has networking:

sudo vim /rw/config/rc.local

add this line:

socat TCP-LISTEN:21325,fork EXEC:"qrexec-client-vm sys-usb trezord-service"

You only have to install the Trezor Bridge and Udev rules in the sys-usb service VM, and not in every AppVM where you want to use the device.