I’ve been thinking about building a tool like this for fun. Does the code run inside a Docker container? I’ve been looking at Firecracker VMs for sandboxing which seems pretty cool
I’ve been thinking about building a tool like this for fun. Does the code run inside a Docker container? I’ve been looking at Firecracker VMs for sandboxing which seems pretty cool
Code ("actions") run in a Docker container using the gVisor runtime. I'm also toying with using firecracker-containerd, which uses Firecracker microVMs underneath.
It's funny you mention that. A previous "iteration" of this project was an edge function runtime, which would take Docker images and convert them to Firecracker VMs, prebooting them, and taking a snapshot at the right moment using some VSOCK magic. It was similar to Fly.io, Lambda@Edge, etc. and ultimately I decided to go another direction because most people don't care about low-latency compute on the edge.