Using pi-sbx microVM sandboxes without nested virtualization
pi-sbx keeps Pi on the host and runs its built-in shell and filesystem tools inside a Docker SBX microVM. Workspace changes remain visible on the host. PVM (Pagetable-based Virtual Machine) lets us run these microVMs inside an x86_64 Linux VM without exposed VMX/SVM or nested virtualization. It still provides the /dev/kvm interface used by SBX. First, install and boot the PVM host kernel from Porting PVM to Linux 7.2, including its pti=off boot setting. You also need an SBX-compatible PVM guest kernel, saved as vmlinux below. ...