Isolated guest creation in a virtualized computing system

A device, comprising:

• a memory module configured to include a high privilege execution environment and a low privilege execution environment;
• and
• a processing module configured to execute a low privilege manager for the low privilege execution environment, the low privilege manager being configured to cause a high privilege manager in the high privilege execution environment to place at least one guest into the high privilege execution environment.

A method, comprising:

• loading at least one guest into a low privilege execution environment;
• and
• issuing a command to a high privilege manager in a high privilege execution environment to place the at least one guest into the high privilege execution environment.

A system comprising at least one machine-readable storage medium having stored thereon, individually or in combination, instructions that when executed by one or more processors result in the following operations comprising:

• loading at least one guest into a low privilege execution environment;
• and
• issuing a command to a high privilege manager in a high privilege execution environment to place the at least one guest into the high privilege execution environment.