Nested virtualization
Partly builtSome of this works today; the page says which parts.
Every sandbox has /dev/kvm, so QEMU, Firecracker and the Android emulator can run inside it.
harebox new --name kvm
harebox exec current -- test -e /dev/kvm
| Feature | While a nested VM runs |
|---|---|
| Auto-sleep | Off |
| Memory snapshot | Refused with 409 capability_unavailable |
| Disk snapshot | Works, and says crash_consistent |
| Fork | Disk only |
| Maintenance | A scheduled restart, with at least 72 hours' notice |
This is deliberately conservative. Saving nested CPU state isn't confirmed on AMD. Having /dev/kvm doesn't trigger this: only running nested guests does. Read capabilities.memory_snapshot rather than assuming.