This is a clone of the CNV feature request CNV-40413. For the linux based guests, there are [patches upstream|https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/message/EXJPQJSZEOTXAJRKPDAMCWRC4S2QDQFF/] for libvirt which add support for ssh proxying via vsock, thus no host-guest network setup is in fact needed. Windows support is subject for discussion,

Original requirement description follows: 

• As a Windows admin, I like to prepare (configure using scripts, install Windows Updates and applications from ISOs) my VMs, while they have no network access, yet, so that the process is as deterministic as possible.

• As an VM admin, I like to execute applications in my VMs (e.g. to run a security scanner), while I might have either no knowledge or permissions to access the VM via network.

• Both scenarios might be triggered via ansible (CNV-40697).

• Authentication and authorization should happen inside the guest by the guest to enter the desired execution context.

• The request to copy files from and to the VM is likely to come up in the future, so it would be great if it could be already addressed.