I came from PVE 6.4 and PBS 1.X, installed on top on Debian 10 on the same host, with secure boot from Mortar Framework.
I use principally a Windows 10 VM with GPU (WX 3100), NIC (Intel i210) and M2 PCIe Renesas USB3 (for USB front) passed trough.
This is my daily "computer", used with a KVM...