Open-sourcing a MicroVM Runtime for Docker and gVisor Sandboxes
Summary
Aerol AI has open-sourced a MicroVM runtime compatible with Docker and gVisor sandboxes, offering faster setup and launch times than existing solutions.
Similar Articles
We Reverse-Engineered Docker Sandbox's Undocumented MicroVM API
A team reverse-engineered Docker's undocumented MicroVM API used by Docker Sandboxes and built the open-source Sandbox Agent SDK to orchestrate AI coding agents inside microVMs for secure untrusted code execution.
MicroVMs: Run isolated sandboxes with full lifecycle control
AWS Lambda announces MicroVMs, a new serverless compute primitive that provides isolated, stateful execution environments with VM-level isolation and near-instant launch, powered by Firecracker.
Docker has always used microVMs (well since 2016)
作者(前 Docker 员工)回顾了 Docker 自 2016 年起在 Docker Desktop 中使用基于 hyperkit/ LinuxKit 的微虚拟机架构的历史,并指出该技术如今是 Docker Sandboxes 运行 AI coding agent 的安全隔离基础。
@rauchg: This is so powerful. ▲ Sandbox can now run 𝚍𝚘𝚌𝚔𝚎𝚛 and 𝚏𝚞𝚜𝚎, unconstrained. MicroVMs are the gift that keeps o…
Vercel's Sandbox now supports running Docker and FUSE filesystems without constraints, enabling developers to mount S3 buckets and network filesystems, and share state across sandboxes. This update is built on MicroVMs for instant boot and unconstrained runtimes.
@gerhart_x: "NVX is an ultra-light micro-VM sandbox for running untrusted workloads with hardware-enforced isolation. It is built o…
Microsoft has open-sourced NVX, an ultra-light micro-VM sandbox for running untrusted workloads with hardware-enforced isolation, built on OpenVMM with Linux as guest and support for KVM, MSHV, and Windows Hypervisor Platform.