-platform=kvm -file-access=proxy-exclusive -overlay -network=sandbox