HomeProjectsArticlesPK BoardAbout
Explore Projects

Firecracker

Active
GitHub Rust Apache-2.0

Description

Lightweight microVM runtime by AWS, designed for containers and functions.

Key Features

  • microVM — KVM-based lightweight virtualization
  • Fast boot — 125ms to start a VM
  • Small footprint — 5MiB minimum
  • Secure — Hardware-level isolation
  • Cloud-native — Powers Lambda/Fargate

Use Cases

💡 Build multi-tenant code execution sandboxes.
💡 Provide microVMs for FaaS platforms.
💡 Research serverless sandbox tech.

Strengths & Limitations

✅ Strengths

  • • Actively maintained, recent updates
  • • High community interest (36.5k stars)
  • • Permissive open-source license (Apache-2.0)
  • • Responsive to issues, low backlog

Tags

firecracker microvm sandbox rust

Categories

🏗️ Sandbox & Execution

Quick Start

# Install and run
git clone https://github.com/firecracker-microvm/firecracker.git
cd firecracker && tools/devtool build
Visit GitHub

Related Projects

forkd

2.8k · Rust
Active A

Firecracker-based microVM sandbox runtime designed for AI agent fan-out execution, supporting spawning 100 child sandboxes in ~100 ms with KVM isolation and memory snapshot copy-on-write.

firecrackermicrovmsandbox +2
  • · Millisecond fork — 100 microVMs spawned in ~101 ms, single BRANCH in 56 ms, 100x faster than cold boot
  • · KVM hardware isolation — Hardware-level memory isolation based on Firecracker, each child is an independent VM
  • · Snapshot copy-on-write — Parent VM boots once and snapshots to disk, children share parent memory pages via MAP_PRIVATE
View on GitHub

AgentENV

3.4k · Rust
Active A

Moonshot AI's platform for running agent environments at scale, powering Kimi K3 agentic RL — Firecracker microVM clusters, millisecond snapshots and forks, E2B-compatible API.

sandboxfirecrackermicrovm +2
  • · Scale across environments — loads diverse OCI images on demand via overlaybd, proven at 1.5 million images in production
  • · Millisecond snapshot and resume — snapshots complete in under 100ms; environments boot/resume under 50ms and pause under 100ms
  • · Native fork support — a running environment forks into multiple independent sandboxes for parallel agent workflows
View on GitHub

Zeroboot

2.4k · Rust
Stale B

Sub-millisecond VM sandbox service based on Firecracker, providing hardware-isolated ultra-fast execution environments for AI agents via copy-on-write memory snapshots.

firecrackermicrovmsandbox +2
  • · Sub-millisecond startup — 0.79 ms p50 spawn latency via mmap MAP_PRIVATE, 1000 concurrent forks in 815 ms
  • · Hardware-level isolation — Each fork is an independent KVM VM with hardware-enforced memory isolation
  • · Minimal memory footprint — ~265 KB per sandbox, significantly better than E2B (~128 MB) and microsandbox (~50 MB)
View on GitHub

CubeSandbox

11.7k · Go
Active A

A high-performance, secure sandbox service for AI agents by Tencent Cloud, built on RustVMM and KVM with hardware-level isolation, sub-60ms cold start, <5MB memory overhead, and E2B SDK compatibility.

sandboxcode-executionrust +2
  • · Blazing-fast cold start: sub-60ms end-to-end sandbox creation via resource pool pre-provisioning and snapshot cloning
  • · Ultra-low memory overhead: less than 5MB per instance, enabling thousands of sandboxes on a single machine
  • · True kernel-level isolation: each agent runs with its own dedicated Guest OS kernel based on RustVMM and KVM
View full details → View on GitHub

Related Articles

sandbox-executionmicrovmfirecracker

Sandboxing Code Execution in AI Agents: From Docker to microVMs, a Decision Matrix

A side-by-side comparison of five sandbox technologies, weighing latency, security, and ops cost.

Read more →