<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Sandbox on Dhiru's Notebook</title><link>https://rfcorner.in/tags/sandbox/</link><description>Recent content in Sandbox on Dhiru's Notebook</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Wed, 28 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://rfcorner.in/tags/sandbox/index.xml" rel="self" type="application/rss+xml"/><item><title>Using pi-sbx microVM sandboxes without nested virtualization</title><link>https://rfcorner.in/posts/using-pi-sbx-without-nested-virtualization/</link><pubDate>Wed, 28 Oct 2026 00:00:00 +0000</pubDate><guid>https://rfcorner.in/posts/using-pi-sbx-without-nested-virtualization/</guid><description>&lt;p&gt;&lt;a href="https://github.com/ChristianMoesl/pi-sbx"&gt;&lt;code&gt;pi-sbx&lt;/code&gt;&lt;/a&gt; keeps Pi on the host and
runs its built-in shell and filesystem tools inside a Docker SBX microVM.
Workspace changes remain visible on the host.&lt;/p&gt;
&lt;p&gt;PVM (Pagetable-based Virtual Machine) lets us run these microVMs inside an
x86_64 Linux VM without exposed VMX/SVM or nested virtualization. It still
provides the &lt;code&gt;/dev/kvm&lt;/code&gt; interface used by SBX.&lt;/p&gt;
&lt;p&gt;First, install and boot the PVM host kernel from
&lt;a href="https://rfcorner.in/posts/porting-pvm-to-linux-7.2/"&gt;Porting PVM to Linux 7.2&lt;/a&gt;,
including its &lt;code&gt;pti=off&lt;/code&gt; boot setting. You also need an SBX-compatible PVM
guest kernel, saved as &lt;code&gt;vmlinux&lt;/code&gt; below.&lt;/p&gt;</description></item></channel></rss>