Enabling Nested Virtualization in Virtual Machines

Virtuozzo Server supports nested Intel VT-x and AMD-V virtualization in virtual machines.

To permanently enable nested virtualization on the host, do the following:

1. Stop all running or paused virtual machines on the node.

2. Unload the required module from the kernel:

   1	# rmmod kvm_intel

   or

   1	# rmmod kvm_amd

3. Uncomment the line options <module> nested=1 in /etc/modprobe.d/kvm.conf corresponding to the module.

4. Load the module again:

   1	# modprobe kvm_intel

   or

   1	# modprobe kvm_amd

5. Restart the libvirt daemon:

   1	# systemctl restart libvirtd

6. Enable nested virtualization in the virtual machine:

   1	# prlctl set MyVM --nested-virt on

Take note of the following:

1. A guest operating system in a nested virtual machine will not be able to obtain an IP address via DHCP if ipfilter, macfilter, and preventpromisc parameters of the host VM’s bridged network adapter are set to no.
2. You cannot change CPU features mask for nested virtual machines using the prlsrvctl set --cpu-features-mask command.