ついに実現したNested Hyper-V を体感してみる

Invoke-WebRequest https://raw.githubusercontent.com/Microsoft/Virtualization-Documentation/master/hyperv-tools/Nested/Enable-NestedVm.ps1 -OutFile C:\Enable-NestedVm.ps1

C:\Enable-NestedVm.ps1 -VmName "TestVM"

This script will set the following for TestVM in order to enable nesting:
Vm State: Running
　　TestVM will be turned off
　　Virtualization extensions will be enabled
　　Optionally enable mac address spoofing
Input Y to accept or N to cancel:Y
警告: 入れ子構造の仮想化は、サポートされていないプレビュー機能です。ゲスト仮想マシンで実行されている Hyper-V ハイパーバイザー以外のハイパーバイザーでは、エラーが発生する可能性があります。さらに、Hyper-Vの一部の機能には、動的メモリ、チェックポイント、保存/復元などの入れ子構造の仮想化との互換性がありません。
Mac Adderess Spoofing isn't enabled, nested guests won't have network!

Would you like to enable? (Y/N)Y

Get-VMProcessor TestVM | Select *

VMCheckpointId
: 00000000-0000-0000-0000-000000000000
VMCheckpointName
:
ResourcePoolName
: Primordial
Count
: 4
CompatibilityForMigrationEnabled
: False
CompatibilityForOlderOperatingSystemsEnabled
: False
HwThreadCountPerCore
: 1
ExposeVirtualizationExtensions
: True
Maximum
: 100
Reserve
: 0
RelativeWeight
: 100
MaximumCountPerNumaNode
: 8
MaximumCountPerNumaSocket
: 1
EnableHostResourceProtection
: False
OperationalStatus
: {Ok, HostResourceProtectionDisabled}
StatusDescription
: {OK, ホスト リソース保護は無効です。}
Name
: プロセッサ
Id
: Microsoft:862A6E40-A3E5-4E22-890A-AFC7AF788A9F\b637f346-6a0e-4dec-af52-bd70cb80a21d\0
VMId
: 862a6e40-a3e5-4e22-890a-afc7af788a9f
VMName
: TestVM
VMSnapshotId
: 00000000-0000-0000-0000-000000000000
VMSnapshotName
:
CimSession
: CimSession: .
ComputerName
: WIN-O1JFL8DSG92
IsDeleted
: False

param([string]$vmName)
#
# Enable-NestedVm.ps1
#
# Checks VM for nesting comatability and configures if not properly setup.
#
# Author: Drew Cross

if([string]::IsNullOrEmpty($vmName)) {
　　Write-Host "No VM name passed"
　　Exit;
}

# Constants
$4GB = 4294967296

#
# Need to run elevated. Do that here.
#

# Get the ID and security principal of the current user account
$myWindowsID = [System.Security.Principal.WindowsIdentity]::GetCurrent();
$myWindowsPrincipal = New-Object System.Security.Principal.WindowsPrincipal($myWindowsID);

# Get the security principal for the administrator role
$adminRole = [System.Security.Principal.WindowsBuiltInRole]::Administrator;

# Check to see if we are currently running as an administrator
if ($myWindowsPrincipal.IsInRole($adminRole)) {
　　# We are running as an administrator, so change the title and background colour to indicate this
　　$Host.UI.RawUI.WindowTitle = $myInvocation.MyCommand.Definition + "(Elevated)";
#$Host.UI.RawUI.BackgroundColor = "DarkBlue";
　　Clear-Host;
　　} else {
　　# We are not running as an administrator, so relaunch as administrator

　　# Create a new process object that starts PowerShell
　　$newProcess = New-Object System.Diagnostics.ProcessStartInfo "PowerShell";

　　# Specify the current script path and name as a parameter with added scope and support for scripts with spaces in it's path
　　$newProcess.Arguments = "& '" + $script:MyInvocation.MyCommand.Path + "'"

　　# Indicate that the process should be elevated
　　$newProcess.Verb = "runas";

　　# Start the new process
　　[System.Diagnostics.Process]::Start($newProcess) | Out-Null;

　　# Exit from the current, unelevated, process
　　Exit;
　　}

#
# Get Vm Information
#

$vm = Get-VM -Name $vmName

$vmInfo = New-Object PSObject

# VM info
Add-Member -InputObject $vmInfo NoteProperty -Name "ExposeVirtualizationExtensions" -Value $false
Add-Member -InputObject $vmInfo NoteProperty -Name "DynamicMemoryEnabled" -Value $vm.DynamicMemoryEnabled
Add-Member -InputObject $vmInfo NoteProperty -Name "SnapshotEnabled" -Value $false
Add-Member -InputObject $vmInfo NoteProperty -Name "State" -Value $vm.State
Add-Member -InputObject $vmInfo NoteProperty -Name "MacAddressSpoofing" -Value ((Get-VmNetworkAdapter -VmName $vmName).MacAddressSpoofing)
Add-Member -InputObject $vmInfo NoteProperty -Name "MemorySize" -Value (Get-VMMemory -VmName $vmName).Startup


# is nested enabled on this VM?
$vmInfo.ExposeVirtualizationExtensions = (Get-VMProcessor -VM $vm).ExposeVirtualizationExtensions

Write-Host "This script will set the following for $vmName in order to enable nesting:"

$prompt = $false;

# Output text for proposed actions
if ($vmInfo.State -eq 'Saved') {
　　Write-Host "\tSaveed state will be removed"
　　$prompt = $true
}
if ($vmInfo.State -ne 'Off' -or $vmInfo.State -eq 'Saved') {
　　Write-Host "Vm State:" $vmInfo.State
　　Write-Host " $vmName will be turned off"
　　$prompt = $true
}
if ($vmInfo.ExposeVirtualizationExtensions -eq $false) {
　　Write-Host " Virtualization extensions will be enabled"
　　$prompt = $true
}
if ($vmInfo.DynamicMemoryEnabled -eq $true) {
　　Write-Host " Dynamic memory will be disabled"
　　$prompt = $true
}
if($vmInfo.MacAddressSpoofing -eq 'Off'){
　　Write-Host " Optionally enable mac address spoofing"
　　$prompt = $true
}
if($vmInfo.MemorySize -lt $4GB) {
　　Write-Host " Optionally set vm memory to 4GB"
　　$prompt = $true
}

if(-not $prompt) {
　　Write-Host " None, vm is already setup for nesting"
　　Exit;
}

Write-Host "Input Y to accept or N to cancel:" -NoNewline

$char = Read-Host

while(-not ($char.StartsWith('Y') -or $char.StartsWith('N'))) {
　　Write-Host "Invalid Input, Y or N"
　　$char = Read-Host
}


if($char.StartsWith('Y')) {
　　if ($vmInfo.State -eq 'Saved') {
　　　　Remove-VMSavedState -VMName $vmName
　　}
　　if ($vmInfo.State -ne 'Off' -or $vmInfo.State -eq 'Saved') {
　　　　Stop-VM -VMName $vmName
　　}
　　if ($vmInfo.ExposeVirtualizationExtensions -eq $false) {
　　　　Set-VMProcessor -VMName $vmName -ExposeVirtualizationExtensions $true
　　}
　　if ($vmInfo.DynamicMemoryEnabled -eq $true) {
　　　　Set-VMMemory -VMName $vmName -DynamicMemoryEnabled $false
}

　　# Optionally turn on mac spoofing
　　if($vmInfo.MacAddressSpoofing -eq 'Off') {
　　　　Write-Host "Mac Adderess Spoofing isn't enabled, nested guests won't have network!" -ForegroundColor Yellow
　　　　Write-Host "Would you like to enable? (Y/N)" -NoNewline
　　　　$input = Read-Host

　　　　if($input -eq 'y' -or 'Y') {
　　　　　　Set-VMNetworkAdapter -VMName $vmName -MacAddressSpoofing on
　　　　}
　　　　else {
　　　　　　Write-Host "Not setting Mac Address Spoofing feature (can be enabled via UI)."
　　　　}

　　}

　　if($vmInfo.MemorySize -lt $4GB) {
　　　　Write-Host "Vm memory is set less than 4GB, without 4GB or more, you may not be able to start VMs!" -ForegroundColor Yellow
　　　　Write-Host "Would you like to set Vm memory to 4GB? (Y/N)" -NoNewline
　　　　$input = Read-Host

　　　　if($input -eq 'y' -or 'Y') {
　　　　　　Set-VMMemory -VMName $vmName -StartupBytes $4GB
　　　　}
　　　　else {
　　　　　　Write-Host "Not setting Vm Memory to 4GB"
　　　　}
　　}
　　Exit;
}

if($char.StartsWith('N')) {
　　Write-Host "Exiting..."
　　Exit;
}

Write-Host 'Invalid input'