// createSandbox creates a sandbox from a sandbox description, the containers list, the hypervisor
// and the agent passed through the Config structure.
// It will create and store the sandbox structure, and then ask the hypervisor
// to physically create that sandbox i.e. starts a VM for that sandbox to eventually
// be started.
func createSandbox(ctx context.Context, sandboxConfig SandboxConfig, factory Factory) (*Sandbox, error) {
        span, ctx := trace(ctx, "createSandbox")
        defer span.Finish()

        if err := createAssets(ctx, &sandboxConfig); err != nil {
                return nil, err
        }

        s, err := newSandbox(ctx, sandboxConfig, factory)
        if err != nil {
                return nil, err
        }

        if len(s.config.Experimental) != 0 {
                s.Logger().WithField("features", s.config.Experimental).Infof("Enable experimental features")
        }

        // Fetch sandbox network to be able to access it from the sandbox structure.
        var networkNS NetworkNamespace
        if err := s.store.Load(store.Network, &networkNS); err == nil {
                s.networkNS = networkNS
        }