firecracker-sandbox

Upload a binary. Get a server.

MicroVM orchestrator for your VPS with built-in sleep/wake policies, backups, snapshots, HTTPS, custom image, logs and metrics

Virtual machine manager of Frappe Cloud

Bare-metal microVM execution engine in Rust. Sub-5ms snapshot restores, Zero-NIC network isolation, and 30 built-in language toolchains for AI code sandboxes & online judges.

A daemonless microVM sandbox runtime for agents, automation, and untrusted workloads.

Cage lets you programmatically create isolated environments ("sandboxes"), run commands inside them, and tear them down — all through a simple REST API.

A Docker & Firecracker runtime for Apple Silicon Macs, powered by Lima

koto is a microVM-based agent sandbox harness using Firecracker and that has the TUI and gRPC interface you always wanted

CPU feature floor

AgentBox SDK. AI sandboxes for company agents

Secure, isolated sandbox execution on your own infrastructure

Snapshot-optimised Linux guest for Firecracker microVMs. Measured post-restore working set: 1563 pages / 6.1 MiB. Open harnesses, WSL2-relative numbers.

Execute untrusted code securely in KVM microVMs with Firecracker, packaged as a single Rust binary for self-hosted judge and code execution.

Threat-model-driven backup security blueprint: dual-control authorization, Firecracker-isolated repositories, PQC-ready signing, append-only restic storage. Design research — not a turnkey product.

Cirrocumulus: a secure, tileable mini cloud in Rust. Runs workloads in Firecracker microVMs sandboxed by jailer, managed from the CLI with a live htop-style terminal dashboard.