







Here's some very intriguing work taking place by a Google engineer..
VM save and restore/live migration support · Issue #41 · magma-gpu/rutabaga_gfx
This was requested in #24 (comment). I doubt it is practical, but I am making this issue so that there can be a record of the desire, even if the issue is immediately closed as “won’t fix”.
Why exe.dev VMs are persistent - exe.dev blog
On the design decision to make VMs persistent, with persistent disks.
smol machines — ship and run software with isolation by default
Run any workload in a fast, hardware-isolated Linux VM. The same SDK and the same .smolmachine artifact run identically:
smol-machines/smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.
Issue · lima-vm/lima
Linux virtual machines, with a focus on running containers - Issue · lima-vm/lima
Vercel Sandbox
Vercel Sandbox allows you to run arbitrary code in isolated, ephemeral Linux VMs.
We rebuilt the Linux microVM stack on Apple Silicon
Firecracker needs KVM and therefore a Linux host, and the image tooling around it needs loop mounts and Linux userland. We rebuilt the stack on Apple's Virtualization.framework to boot the same OCI images as microVMs on macOS and on Linux.

[RFC PATCH 00/73] KVM: x86/PVM: Introduce a new hypervisor
Cloud native Go: building reliable services in unreliable environments
What do Docker, Kubernetes, and Prometheus have in comm…

Intel Xe VFIO Driver: GPU Virtualization Enters the Mainstream
Intel Xe VFIO driver in Linux 6.19 enables SR-IOV GPU virtualization for multiple VMs. After 20+ years in infrastructure: this changes…

Introducing Deno Sandbox | Deno
Instant Linux microVMs with defense-in-depth security for running untrusted code.

Cloud Observability
Gain insights to detect and quickly respond to changes in cloud-native and monolithic applications
Pools: Our Newest Primitive - exe.dev blog
A new way to group VMs, with shared resources and predictable pricing. Plus new Personal and Work plans.

eBPF and Kubernetes: Little Helper Minions for Scaling Microservices - Daniel Borkmann, Cilium
sgkdev/page_inject
CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer