← Default view

Triage schematic · sheet 07 of 07 · rev 2026-07-30

Which escape hatch
for which kind of leftover?

One pass down the tree per stranded application. Every branch terminates: in a Wine prefix, in a local VM, on someone else's Windows box, on a partition you keep — or, once, in a dead end you should not walk into.

Depthrecon
Sources16
Read4 min
Branches7
Dead ends3

Decision, before the diagram

FIRST STOP Wine, via Bottles Costs nothing, and the AppDB rating tells you in minutes whether this app is the single-window kind that just works.
WHEN WINE CAN'T A local Windows VM Service, filter driver or Explorer integration → skip Wine entirely. KVM/virt-manager, or VMware Workstation Pro, free since Nov 2024.
THE WORK CLUSTER RDP into someone else's Windows Office + two corporate VPNs + SSMS is the employer's compliance problem. Windows 365 is $28–56/user/mo since 1 May 2026.
DO NOT BUILD No dGPU passthrough Muxless Optimus caps the guest at 640×480 with no Optimus handoff. And with three leftovers left, a 120 GB Windows partition beats engineering anything.

The tree

Read top to bottom. The first question your app answers yes to is its hatch — the exclusions come first on purpose, because Wine cannot be talked into a kernel.

dual boot no hatch Wine remote Windows local VM terminated
01 02 03 04 05 A WINDOWS LEFTOVER no native Linux replacement exists Is it a driver, a service or a filter driver? Lenovo Vantage · XTU · QuantumENGINE X-Rite · SENetFilter · Sandboxie YES KEEP A 120 GB WINDOWS PARTITION Wine has no kernel-mode driver stack, and no amount of winetricks adds one. These are drivers, not applications. FREE · BOOT WINDOWS TWICE A YEAR FOR FIRMWARE NO Does it hook Explorer or global input? Fences · DisplayFusion · AutoHotkey ShareX · Ditto · shell extensions YES NO HATCH — REPLACE NATIVELY, OR DROP IT A Wine prefix has no host desktop to integrate with. There is nothing to hook, so there is nothing to emulate. FREE · BUT IT IS A BEHAVIOUR CHANGE, NOT A PORT NO Is it a game with anti-cheat? Fall Guys — Easy Anti-Cheat YES PROTON GE / EXPERIMENTAL ⚠ Rated Running, not Supported. 642 of the 1,166 tracked anti-cheat titles — 55% — are outright broken on Linux. FREE · EXPECT BREAKAGE ON EVERY GAME PATCH NO Does your employer own the workload? Office + OneNote · WatchGuard SSL VPN Check Point Harmony SASE · SSMS YES CORPORATE VDI / RDP TO A MANAGED BOX VPN clients ship filter drivers. Making that the employer's compliance problem is the cheapest hatch there is. Windows 365 list price fell 20% on 1 May 2026, to $28–56/user/mo. IDEALLY €0 · EMPLOYER-PROVIDED NO Single-window Win32 or older- .NET utility? Check AppDB first. IrfanView · Paint.NET · PDFtk Beyond Compare (the app, not the ext) YES WINE, IN A BOTTLES PREFIX ✓ START HERE Wine 11 is the stable branch and this is its best-supported class. The AppDB rating tells you in minutes whether this app is that kind of app — before you spend an evening. FREE · ABOUT AN HOUR PER APP EDGE CASE · SSMS 20, WITH BINARY PATCHES ⚠ Connect, Object Explorer, Query Editor and Server Properties work. Azure connection types, the SSIS/SSAS/SSRS designers, Always On dialogs and Tuning Advisor do not. ~2 h, fragile. NO — IT WANTS THE REAL THING A LOCAL WINDOWS VM KVM + virt-manager, or VMware Workstation Pro — free for personal and commercial use since Nov 2024. Visual Studio 2026 + ReSharper, Power Automate Desktop: the things that need a real desktop. ≈$199 LICENCE, ONE INSTANCE PER LICENCE · ~80 GB DISK WANT IT TO LOOK LIKE A NATIVE APP? WANT THE dGPU INSIDE THE GUEST? WINAPPS OVER FreeRDP ★ 15.7k · Jul 2026 Seamless single-window RDP beats staring at a whole guest desktop for the Office and OneNote you open twice a week. FREE ON TOP OF THE VM YOU ALREADY BUILT ✘ DEAD END · dGPU VFIO PASSTHROUGH Muxless Optimus means the NVIDIA chip drives no panel: the guest caps at 640×480, and the driver refuses to form Optimus with a virtual iGPU, so 3D work never migrates to the dGPU. Setup wants custom UEFI firmware, a vBIOS extracted from a BIOS update, and ACPI patching. A Legion 5 Pro attempt bound the card and got video — and Windows never recognised the RTX 3060M as NVIDIA hardware, so the driver refused to load. DO NOT BUILD · RDP INTO THE VM INSTEAD

Narrow screen? The diagram scrolls sideways.

Hatch specifications

The same five terminals, with the numbers and the citations behind them.

Bottles project banner: Run Windows in Bottles

Wine, in a Bottles prefix

Terminal 05 · first thing to try

Wine 11 is the stable branch, and single-window Win32 / older-.NET utilities are the class it serves best [1]. Triage with the AppDB Platinum/Gold/Silver/Bronze/Garbage definitions before committing an evening [2]. Bottles ★ 8.6k [5] is the prefix manager for apps; Lutris ★ 10.1k [12] is the same idea for games.

CostFree
Effort~1 h per app
Paid supportCrossOver $74, $34/yr, $494 life [13]
Known edgeSSMS 20 patches ★ 1 [8]

A local Windows VM

Terminal 06 · the fall-through

Wine cannot install or usefully run Visual Studio — even when it installs, functionality is missing wholesale [6]. VMware Workstation Pro has been free for personal and commercial use since Broadcom's Nov 2024 change, keyless, on Linux [3]. On QEMU/SPICE, budget the extra hour: SPICE guest tools for a bidirectional clipboard, then phodav/spice-webdavd inside the guest before guest→host file sharing works [14]. GNOME Boxes is the same stack with fewer knobs; virt-manager exposes the settings you will actually need.

Licence≈$199 retail, 1 instance [7]
Disk~80 GB
HypervisorFree (KVM or VMware)
CarriesVisual Studio 2026 + ReSharper, Power Automate Desktop

Remote Windows: VDI, RDP, Cloud PC

Terminal 04 · and the VM's nicer front end

The Office + VPN + SSMS cluster is one workload, and it belongs on a machine someone else patches. Windows 365 dropped 20% on 1 May 2026 to $28–56 per user per month, productivity apps excluded [10]. For occasional use against a box you already have, WinApps ★ 15.7k renders Windows apps as seamless windows next to your Linux ones over FreeRDP [9] — no guest desktop to stare at.

Cloud PC$28–56 / user / mo
Employer VDIIdeally €0
WinAppsFree, needs a Windows target
WhyVPN filter drivers stop being your problem

Keep the partition

Terminal 01 · the hatch that needs no engineering

Firmware and kernel-driver tools — Lenovo Vantage, XTU, QuantumENGINE, X-Rite Color Assistant, SENetFilter, Sandboxie — are drivers, not applications. Wine has no kernel-mode driver stack, so this branch was never a Wine branch. When the leftover list is down to three things you touch monthly, 120 GB of NVMe beats every hatch above it on both cost and hours.

CostFree · 120 GB
EffortNone
CadenceBoot twice a year for firmware

No hatch at all

Terminal 02 · accept the behaviour change

Stardock Fences, DisplayFusion, AutoHotkey, ShareX, Ditto, the Beyond Compare shell extension: these hook Explorer and global input. A Wine prefix has no host desktop to integrate with, so there is nothing for them to hook. Replace natively — that work is in the desktop-shell and utility-belt sheets — or drop the habit.

CostFree
PriceMuscle memory

Terminated branches

Three routes that look like hatches on paper and are not. Marked so future-you does not rediscover them at 1 a.m.

A laptop MXM graphics module with a bare NVIDIA GPU die
✘ DO NOT BUILD A laptop dGPU is not a desktop card on a smaller board — it is a module wired through the chipset with no display outputs of its own. That single fact is what kills the branch below.

dGPU VFIO passthrough

Muxless: the NVIDIA chip drives no panel, so the guest caps at 640×480 and the driver won't form Optimus with a virtual iGPU. Custom UEFI, extracted vBIOS, ACPI patching — the guide's own author says to do it "purely for the fun of tinkering… not for anything important" [4]. A Legion 5 Pro attempt got video, and Windows still never recognised the RTX 3060M as NVIDIA hardware [15].

virtio-gpu / Venus for a Windows guest

Venus Vulkan over virtio-gpu is mature for Linux guests; the Windows-guest OpenGL/Direct3D driver is still work in progress [16]. For Visual Studio, use VMware's mature Windows guest driver [3] or RDP into the VM rather than fighting the display path.

Wine for anything with a service

The Lenovo / JBL / X-Rite / VPN cluster ships services and filter drivers. No amount of winetricks adds a kernel. This is the one branch where more effort buys strictly nothing — recognise it at question 01 and walk to the partition.

Bill of materials

What the whole escape-hatch layer costs if you build every branch you actually need.

Wine + Bottles + LutrisThe entire single-window tier
$0
CrossOver, if you want someone to call$74 up front, $34/yr renewal, or $494 for life
$74
Windows licence for the VMOne instance per licence — the VM counts as a device
≈$199
Hypervisor, KVM or VMware Workstation ProFree for personal and commercial use since Nov 2024
$0
Disk for the guestPlus 120 GB if you keep the Windows partition too
~80 GB
Windows 365 Cloud PC, per userDown 20% on 1 May 2026; productivity apps not included
$28–56/mo
Corporate VDI, if the employer provides itThe cheapest hatch in the whole tree
€0
dGPU passthroughTerminated — cost is measured in weekends, not dollars

Sources · 16

1 WineHQ — Wine 11 is the stable branch; AppDB is the database to check first.
official
2 AppDB rating definitions — Platinum through Garbage, so you can triage before committing.
official
3 Broadcom — Workstation Pro free for commercial, educational and personal use.
official
4 Lan Tian — muxless passthrough: 640×480, no Optimus, custom UEFI + vBIOS + ACPI.
forum
5 bottlesdevs/Bottles ★ 8.6k — the prefix manager for non-game apps.
official
6 Linux Mint forums — Visual Studio is Windows-only and Wine cannot handle it.
forum
7 Microsoft Learn — one licence, one instance, physical or virtual.
official
8 ssms-on-wine ★ 1 — what works and what does not in SSMS 20 under Wine.
official
9 winapps-org/winapps ★ 15.7k — FreeRDP backend, Windows apps as seamless windows.
official
10 Computerworld — Windows 365 down 20% on 1 May 2026 to $28–56/user/mo.
news
11 Are We Anti-Cheat Yet? — Fall Guys is Running, not Supported; 642 of 1,166 broken.
wiki
12 lutris/lutris ★ 10.1k — the game-side Wine/Proton runner.
official
13 CodeWeavers — CrossOver+ $74, $34/yr renewal, CrossOver Life $494.
vendor blog
14 It's FOSS — SPICE guest tools, then phodav/spice-webdavd for guest→host sharing.
vendor blog
15 NVIDIA forums — Legion 5 Pro: video came up, the RTX 3060M was never recognised.
forum
16 Arch Wiki — the Windows-guest OpenGL/Direct3D driver is still work in progress.
wiki
Full text of this sheet Back to the expedition Atlas recon · 16 sources · drawn 30 Jul 2026