systemd nspawn https://www.softaculous.com/board/index.php?tid=20032 <![CDATA[]]> https://www.softaculous.com/board/index.php?tid=20032&tpg=0#p59095
/etc/systemd/nspawn/virt.nspawn

[Exec]
PrivateUsers=no
Capability=all

[Files]
Bind=/dev/kvm
Bind=/dev/vhost-net
# BindReadOnly=/sys/module
# Optionally bind other devices if needed, for example, hugepages
Bind=/dev/net/tun

[Network]
Bridge=br0

[Containers]
SystemCallFilter=~@system-service
DeviceAllow=/dev/kvm rw
DeviceAllow=/dev/vhost-net rw
DeviceAllow=char-pts rw]]>
Wed, 19 Feb 2025 23:14:59 GMT https://www.softaculous.com/board/index.php?tid=20032&tpg=0#p59095