-platform=kvm -file-access=exclusive -network=sandbox -overlay -net-raw -watchdog-action=panic -fuse -cover