Run without /dev/kvm

[eyueldk]

Love the project; appreciate all the work you've done.

I managed to integrate it into my docker application and it works like a charm. But after reviewing the next steps, I realized my deployment (a VPS - Hetzner VPS to be specific) doesn't support nested virtualization. Thus /dev/kvm is not available as far as I know. I think I have to reevaluate my use of microsandbox and maybe it was not meant for my usecase - a containerized agent development/execution environment.

Just wanted to share my 2 cents. Maybe my usecase is not what you envisioned for your project, but I feel that inability for nested virtualization might make it unusable for anyone using most VPSs. Maybe a QEMU TCG support might help with compatibility with non KVM environments.

Thank you for your time and work.

[appcypher]

Thanks for trying it out, appreciate the thoughtful feedback.

Hetzner does offer bare metal with full KVM, so microsandbox works there if you can move the workload.

More broadly, hardware virtualization needs either bare metal or nested virt, which applies to any VM-based project, not just microsandbox. Shared VPSs usually don't expose /dev/kvm. Containers and emulation will work on a VPS but they're a weaker isolation boundary than VMs, which is part of why microsandbox exists. Bare metal and clouds with nested virt enabled are the target environments.

Thanks again.