Show HN: Vpod – Tiny Linux sandbox running in WASM

Lightweight, secure linux sandboxes for untrusted processes. - capsulerun/vpod
11 points by mavdol04 127 days ago github.com 4 comments
Summary not yet generated for this article.

Original Text

Hi HN,

I spent the last few months reading the RISC‑V specification to build the lightest possible sandboxes. The idea behind a vpod is to quickly spin up a Linux sandbox from snapshots (Alpine by default) without any setup or subsystem required.

The trade-off for portability and security is raw CPU speed. So we don't expect it to match native workloads with Python or pip, for example.

More info is in the README https://github.com/capsulerun/vpod

Happy to answer any questions!

Comments (4 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open