smolvm by smolmachines

“smolvm has better bootup time (<200ms), secrets handling, and egress control compared to lima”

“It is also the least documented, which makes sense.”

“smol machines actually support exactly those things across macs,linux, windows btw”

“Not sure I will give up on smolvm though. I have scripts to launch an instance per task.”

“uses only the required memory and releases what isn’t needed anymore”

“all of them have worked pretty well. But still, I rarely have kept using them.”

“These days I'm looking at microvms (esp. smolvm from smolmachines.com) by default”

“smolvm's serve mode confines each VMM by default with a seccomp allowlist, Landlock, a per-VM uid and no_new_privs”

“Smolvm with it's libkrun vmm provides significantly worse security positioning than slicervms use of firecracker”

“I'm singing the praises of smolmachines.com "smolvm" microvms all over the place”

“smolvm might be the right tool for your needs of containerization + GUI with gpu acceleration through vulkan”

“which (unlike Docker) provide kernel-level isolation (among other benefits)”

“Firecracker actually minimizes the attack surface whereas smolvm does not”

“smolvm provides kernel-level isolation. Much closer to firecracker than docker.”

“definitely useful but NOT relevant to the discussion of sandboxing malicious code”

“among other benefits they only consume host resources if they're actually used”

“We use an awesome project called smolvm that builds on libkrun and makes this alot easier.”

“it work-ish (there is example), but quite hacky.”

“A lightweight ,portable virtual machine that simplifies/replaces need for containers.”

“Only folks i’ve seen solve these are folks who run the sandboxes locally and take that to the cloud”

“I introduced a breaking change in order to build out the hosted platform & registry of pre-packed machines.”

“all the single binaries I made of various distros a month ago, simply don't work anymore”

“those same binaries now silently exit with code 0 and I have absolutely no idea what's wrong or how to diagnose”

“a light weight cross platform virtual machine with egress filtering”

“has "smolvm" microvms with better performance and ergonomics and security than docker”

“I can take care of the isolation story for you across windows, macOS”

“yes to both, here's the example for running docker(indirectly, devcontainers) inside smolvm”

“Simple, fast (sub-200ms cold start), OCI-compat, and has trivial packing to standalone 0-dep executables.”

“Author of a free open source alternative to slicer, based on a fork of libkrun”

“Kernel-level isolation is a significant security differentiator, for starters.”

“you can use it with WSL or using our QEMU backend which supports Windows as well.”

“To make my life simpler, added a single command to start a pre-installed Pi sandbox.”

“I love the idea of using this to distribute applications you might otherwise use a Docker image for.”

“No need for dependency management or compatibility issues because it is baked in.”

“seems like a potentially simpler way to package JVM apps than GraalVM Native”

“I think it'd be a better infra primitive than firecracker that works locally/remote and etc.”

“SmolVM uses microVMs which means the resource consumption is quite minimal.”

“a security focused project should NOT default to train people installing by piping to bash”

“I'm working on an open source technology to make a literal virtual machine shippable”

“Smolvm is designed to run locally, persistent (stateful), long running (efficiency), and interactive.”