Abstract: The present disclosure elates generally to a computer architecture and infrastructure for guest operating systems executing on a host operating system. More particularly, it relates to methods and systems for allowing a guest operating system to control the resources of a commodity server system. A method of allowing a guest operating system to control and manage computer resources includes receiving, by a host operating system, a call from a guest operating system to control and manage computer resources; creating, by the host operating system, a secure sandbox executing on the host operating system; and creating, by the host operating system, a secure tunnel between the secure sandbox and the guest operating system, the secure tunnel having loopback networking. The secure sandbox is controlled and managed by the guest operating system but executing on the host operating system.