Apparently virtualbox instances don’t play well with SendFile. To cure put this in the apache config:

SendFile off

And restart!