For a CI, my best bet would be to save a running snapshot of each OS to test and derive a new instance from there for every job. Also isolate the network bridge from the outside world. The only thing you may have to fix is time synchronization, but your vmm could already be taking care of that.