cgroup_device_acl = [
    "/dev/kvm",
    "/dev/input/by-path/pci-0000:00:13.0-usb-0:2:1.2-event-mouse",
    "/dev/input/by-path/platform-i8042-serio-0-event-kbd",
    "/dev/null", "/dev/full", "/dev/zero",
    "/dev/random", "/dev/urandom",
    "/dev/ptmx", "/dev/kvm",
    "/dev/rtc","/dev/hpet",
]

nvram = [
    "/usr/share/ovmf/x64/OVMF_CODE.fd:/usr/share/ovmf/x64/OVMF_VARS.fd"
]