by looking at the android sources in "development/tools/emulator" i found that goldfish (the android emulator version which is run by qemu - i don't know if it is actually called goldfish) communicates via a so called "qemud bridge" with a renderer application on the host. calls from the egl/opengl(es), and so on libs are passed through the qemud bridge and executed on the host. i think it should be possible to run goldfish (i am just gonna call it that) inside a chroot and the renderer application on the device, it should just be a matter of compiling everything and hacking around with qemud and the renderer application... but who knows, i might be wrong... i might try it eventually, any help is greatly appreciated

also chompers chroid seems to do just that...

this should work on the n9 with a kernel built with all the required android patches.. don't know about the state of the n900s kernel though