No one talks about new Railway Sandboxes - https://docs.railway.com/sandboxes I think they have one of the best sandbox environments on the market with pay per utilized resources pricing, it's a huge cost reduction for agentic workloads when you have 95%+ idle CPU time and occasional spikes for CPU heavy work (e.g. agent run tests or something like this). I use railway to host my openclaw like personal agent for frie…
MicroVMs: Run isolated sandboxes with full lifecycle control
101–110 of 222 posts
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#102There are sooooo many sandbox providers out there. They do spike on different features like: - snapshotting and forking - good SSH and VPN access for end-users - agent-friendly features, like obscuring secrets at network layer Then there's also the option to use libkrun to run local sandboxes on your own computer. That doesn't scratch the itch for hosted services, but works if your goal is to run agents inside isolat…
What people aren't getting with `firecracker` is utilization. Don't get me wrong, `firecracker` is great software and it's what I'm using for lightweight virtualization, but workloads are really bursty over really short periods of time now, even with the snapshot and restore that you can get if you're willing to hack on `firecracker` substantially, you hit walls where it's like, this is too much against the grain, th…
That way it can be elastic in CPU, memory and somewhat disk.
How far are you on your take?
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#103Does anyone understand the pricing? The pricing page says “Lambda MicroVMs are priced per instance-second” but MicroVM’s aren’t otherwise mentioned.
Click on the "MicroVMs" tab of the pricing page: https://aws.amazon.com/lambda/pricing/
This pricing model looks very complicated and unfriendly for hobbyists. Maybe it’s cheaper than exe.dev’s $20/month, but I have no idea. I’d have to a complicated calculation based on guesses to tell.
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#104Earlier quoted context omitted.
Fargate does not use Firecracker, it is simply ec2 instances.
Source? https://aws.amazon.com/blogs/aws/firecracker-lightweight-vir... says > Battle-Tested – Firecracker has been battled-tested and is already powering multiple high-volume AWS services including AWS Lambda and AWS Fargate.
And also, you’ll notice that Fargate takes minutes to launch while Lambda takes a second or less. You’re waiting on AWS to launch a EC2 with your config and pull your containers into it.
(that article matches things I heard from Amazon when I asked why my stuff is slow)
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#105I’m building this google3 style mounting to address this.
https://github.com/mohsen1/git-lazy-mount
Still work in progress but for now I am seeing promising results
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#106There are sooooo many sandbox providers out there. They do spike on different features like: - snapshotting and forking - good SSH and VPN access for end-users - agent-friendly features, like obscuring secrets at network layer Then there's also the option to use libkrun to run local sandboxes on your own computer. That doesn't scratch the itch for hosted services, but works if your goal is to run agents inside isolat…
Setting up your own is not that hard and if you bought some compute before the Altman squeeze, very cheap.
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#107I don’t get it we are paying at least hundreds or maybe thousands per month on ai costs. Just get a regular vm ?
Also, a single VM is pretty limiting.
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#108Earlier quoted context omitted.
Setting up your own is not that hard and if you bought some compute before the Altman squeeze, very cheap.
Def! My personal belief is that the future of an "app" is a combo: 1. micro VM 2. agent on the VM 3. software bundled into the VM So, it should be stupid simple to run these local sandboxed apps/agents. Right now, not too hard for technical users (esp. with things like https://smolmachines.com/ and https://microsandbox.dev/ ), but not as easy as clicking an app icon or typing `/path/to/binary` in the CLI
Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#109Re: MicroVMs: Run isolated sandboxes with full lifecycle control
#110Shout out to https://smolmachines.com/ for supporting Vulkan over virtio-gpu/Venus. Currently the best implementation I'm aware of. Unfortunately my use case is running a full desktop inside the VM, and streaming it out over something like Sunshine/Moonlight. For this you need GPU rendering and video encoding. Venus rendering works, but you have to pass the frames back and forth between the host and the guest multiple times which is inefficient. Also Venus doesn't support video encode as far as I can tell.