Qubes is based on Xen and has a fairly minimal trusted code base.