nowfound

Life & fun · April 29, 2021

LV

Launch VM workloads securely and instantaneously, without VMs

Hello HN! We've been working on a new hypervisor https://kwarantine.xyz that can run strongly isolated containers. This is still a WIP, but we wanted to give the community an idea about our approach, its benefits, and various use cases it unlocks. Today, VMs are used to host containers, and make up for the lack of strong security as well as kernel isolation in containers. This work adds this missing security piece in containers. We plan on launching a free private beta soon. Meanwhile, we'd deeply appreciate any feedback, and happy to answer any questions here or on our slack…

Launch VM workloads securely and instantaneously, without VMs launched on April 29, 2021 with 12 votes, #1,277 of 3,754 launches that month and more than 75% of that year's launches.

In plain words

Kwarantine is a hypervisor that runs strongly isolated containers without requiring virtual machines. It addresses container security limitations by providing kernel isolation and strong process isolation at the hypervisor level. The tool is designed for developers and infrastructure teams who need container workloads with VM-level security guarantees but faster deployment than traditional virtual machines. The project was in development as a free private beta.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Hello HN! We've been working on a new hypervisor https://kwarantine.xyz that can run strongly isolated containers. This is still a WIP, but we wanted to give the community an idea about our approach, its benefits, and various use cases it unlocks. Today, VMs are used to host containers, and make up for the…

Does a similar job

all alternatives →
  • Sub-millisecond VM sandboxes using CoW memory forkingMar 2026 · github.com · ▲311

    I wanted to see how fast an isolated code sandbox could start if I never had to boot a fresh VM. So instead of launching a new microVM per execution, I boot Firecracker once with Python and numpy already loaded, then snapshot the full VM state. Every execution after that creates a new KVM VM backed by a `MAP_PRIVATE` mapping of the snapshot memory, so Linux gives me copy-on-write pages automatically. That means each sandbox starts from an already-running Python process inside a real VM, runs the code, and exits. These are real KVM VMs, not containers: separate guest kernel, separate guest…

  • krunvm – Create and run lightweight VMs from OCI images2021 · github.com · ▲82

    Create microVMs from OCI images. Contribute to slp/krunvm development by creating an account on GitHub.

  • Katakate – Dozens of VMs per node for safe code exec2025 · github.com · ▲124

    I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx

  • A small virtual machine written in C2014 · github.com · ▲212

    "interesting" VM in C. Let's see how this goes. Contribute to tekknolagi/carp development by creating an account on GitHub.

  • Virtink – Lightweight Virtualization Add-On for Kubernetes2022 · github.com · ▲27

    Virtink is a Kubernetes add-on for running Cloud Hypervisor virtual machines. By using Cloud Hypervisor as the underlying hypervisor, Virtink enables a lightweight and secure way to run fully virtualized workloads in a canonical Kubernetes cluster.

  • Slim 2: Create VM from Dockerfile, boots in seconds (+macOS M1/Hyper-V)2022 · github.com · ▲59

    Build and run tiny vms from Dockerfiles. Small and sleek. - GitHub - ottomatica/slim at 2.x

More life & fun this month

the category →

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, April 2021

the whole month →
  • Lofi.cafe▲1,192

    Lofi music streams for studying, working, and relaxing.

    Life & fun · 2021 · lofi.cafe

  • Mighty▲931

    Make Chrome faster and use 10x less memory

    Work · 2021 · playgroundai.com

  • An online whiteboard from Figma designed for teams

    Work · 2021 · figma.com

  • Butter▲848

    All-in-one tool for the smoothest virtual workshops 🧈

    Work · 2021

  • Build your landing page with these 100+ tools

    Growth · 2021 · landingpage.fyi

  • PF

    Life & fun · 2021 · pdf.math.dev