Microsandbox: Virtual Machines that feel and perform like containers

Post by spixy » Sun, Jun 01, 2025, 8:10 AM UTC

appcypher wrote: post #65

SwiftyBug wrote: post #62

Kind of almost off-topic: I'm working on a project where I must run possibly untrusted JavaScript code. I want to run it in an isolated environment. This looks like a very nice solution as I could spin up a microsandbox and securely run the code. I could even have a pool os live sandboxes so I wouldn't even experience the 200ms starts. Because this is OCI-compatible, I could even provide a whole sandboxed environment…

> Would that be a good use case for this? That is an ideal use case > Are there better alternatives? Created microsandbox because I didn't find any

Post by catlifeonmars » Sun, Jun 01, 2025, 5:41 PM UTC

appcypher wrote: post #150

catlifeonmars wrote: post #130

Earlier quoted context omitted.

How does the microvm architecture compare with firecracker?

They are similar. We use libkrun under the hood. Firecracker team seems not to be interested in a macOS implementation

Post by naikrovek » Wed, Jun 04, 2025, 4:25 AM UTC

hnuser123456 wrote: post #194

naikrovek wrote: post #187

Earlier quoted context omitted.

Please tell me you are joking. Even if it’s a lie. Management Engine .. actually I do not have the energy to deal with paranoid people. I never had that kind of energy. I never will. You’re all so efficient at drawing energy out of conversations and killing them. You’re like conversational vampires. It’s exhausting. I don’t even care if you’re right or wrong about Intel ME. It is just so exhausting listening to you g…

"ME can also control various aspects of the Virtualization Engine directly over the ME Command Interface (MECI)." https://en.wikichip.org/wiki/intel/management_engine