-platform=kvm -file-access=direct -network=sandbox