Live data from Hacker News

MicroVMs: Run isolated sandboxes with full lifecycle control

aws.amazon.com

101–110 of 222 posts

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#101
post #82

No one talks about new Railway Sandboxes - https://docs.railway.com/sandboxes I think they have one of the best sandbox environments on the market with pay per utilized resources pricing, it's a huge cost reduction for agentic workloads when you have 95%+ idle CPU time and occasional spikes for CPU heavy work (e.g. agent run tests or something like this). I use railway to host my openclaw like personal agent for frie…

Have you tried using unikraft? I think it might be cheaper imo. Worth a try.

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#102
post #32

There are sooooo many sandbox providers out there. They do spike on different features like: - snapshotting and forking - good SSH and VPN access for end-users - agent-friendly features, like obscuring secrets at network layer Then there's also the option to use libkrun to run local sandboxes on your own computer. That doesn't scratch the itch for hosted services, but works if your goal is to run agents inside isolat…

What people aren't getting with `firecracker` is utilization. Don't get me wrong, `firecracker` is great software and it's what I'm using for lightweight virtualization, but workloads are really bursty over really short periods of time now, even with the snapshot and restore that you can get if you're willing to hack on `firecracker` substantially, you hit walls where it's like, this is too much against the grain, th…

I designed my take to basically eliminate the concept of vm being a rigid box of cpu/memory with CPU oversubscription and virtio-ballooning on memory + sparse ext4.

That way it can be elastic in CPU, memory and somewhat disk.

How far are you on your take?

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#103

Does anyone understand the pricing? The pricing page says “Lambda MicroVMs are priced per instance-second” but MicroVM’s aren’t otherwise mentioned.

Click on the "MicroVMs" tab of the pricing page: https://aws.amazon.com/lambda/pricing/

Thanks! These tabs render badly on mobile, but you can click on “Functions” to hide it and then click the “MicroVMs” tab to show it.

This pricing model looks very complicated and unfriendly for hobbyists. Maybe it’s cheaper than exe.dev’s $20/month, but I have no idea. I’d have to a complicated calculation based on guesses to tell.

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#104

Earlier quoted context omitted.

Fargate does not use Firecracker, it is simply ec2 instances.

Source? https://aws.amazon.com/blogs/aws/firecracker-lightweight-vir... says > Battle-Tested – Firecracker has been battled-tested and is already powering multiple high-volume AWS services including AWS Lambda and AWS Fargate.

Counterpoint: https://justingarrison.com/blog/2024-02-08-fargate-is-not-fi...

And also, you’ll notice that Fargate takes minutes to launch while Lambda takes a second or less. You’re waiting on AWS to launch a EC2 with your config and pull your containers into it.

(that article matches things I heard from Amazon when I asked why my stuff is slow)

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#105
I’ve been working with AgentCore that uses the same MicroVMs. They are capable in many ways but for coding agents that load a big got repo they get bloated quickly with the git repo.

I’m building this google3 style mounting to address this.

https://github.com/mohsen1/git-lazy-mount

Still work in progress but for now I am seeing promising results

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#106
post #32

There are sooooo many sandbox providers out there. They do spike on different features like: - snapshotting and forking - good SSH and VPN access for end-users - agent-friendly features, like obscuring secrets at network layer Then there's also the option to use libkrun to run local sandboxes on your own computer. That doesn't scratch the itch for hosted services, but works if your goal is to run agents inside isolat…

Setting up your own is not that hard and if you bought some compute before the Altman squeeze, very cheap.

How do you do it?

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#107

I don’t get it we are paying at least hundreds or maybe thousands per month on ai costs. Just get a regular vm ?

You don’t have to pay that much. I did pay a couple hundred for a while, but not since I switched to Chinese models along with a $20 ChatGPT subscription.

Also, a single VM is pretty limiting.

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#108
post #50

Earlier quoted context omitted.

Setting up your own is not that hard and if you bought some compute before the Altman squeeze, very cheap.

Def! My personal belief is that the future of an "app" is a combo: 1. micro VM 2. agent on the VM 3. software bundled into the VM So, it should be stupid simple to run these local sandboxed apps/agents. Right now, not too hard for technical users (esp. with things like https://smolmachines.com/ and https://microsandbox.dev/ ), but not as easy as clicking an app icon or typing `/path/to/binary` in the CLI

You basically described exe.dev

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#109

does it have gpu support?

check this out https://github.com/smol-machines/smolvm will have a hosted platform soon with GPU support (vulkan)

Can confirm smolvm accelerated Vulkan compute worked great in my tests. Excellent project.

Re: MicroVMs: Run isolated sandboxes with full lifecycle control

#110
The holy grail microVM for me is one that can properly share a GPU across VMs, similar to what you can do with containers.

Shout out to https://smolmachines.com/ for supporting Vulkan over virtio-gpu/Venus. Currently the best implementation I'm aware of. Unfortunately my use case is running a full desktop inside the VM, and streaming it out over something like Sunshine/Moonlight. For this you need GPU rendering and video encoding. Venus rendering works, but you have to pass the frames back and forth between the host and the guest multiple times which is inefficient. Also Venus doesn't support video encode as far as I can tell.

Post reply on HN