Amazon's open-source VMM behind Lambda and Fargate: KVM-backed microVMs that boot in around 125ms on a deliberately minimal device model, the jailer that wraps the hypervisor in chroot, seccomp, and cgroups for defense-in-depth, snapshotting for near-instant clones and pre-warmed pools, and the pattern for building your own multi-tenant function or sandbox runtime. Plus an honest comparison with gVisor, Kata Containers, and Cloud Hypervisor — and where each one actually fits.
Firecracker
-
Firecracker and the microVM