Show HN: Sandkiln – Fast Firecracker MicroVM sandboxes for AI-generated code

Category: infrastructure

Tags: firecracker, microvm, sandboxing, untrusted-code, rust, virtualization

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 6, Utility: 7)

Sandkiln provides fast, self-hosted Firecracker microVM sandboxes for running untrusted code, particularly AI-generated code, with each execution isolated in its own kernel, filesystem, and network. It combines a Rust VMM, a static guest agent over vsock, and an HTTP daemon, achieving impressive cold boot times of ~10ms and snapshot resume times of ~7ms, benchmarked openly.

Target audience: backend developers, devops, security engineers, AI platform teams

Repository: https://sandkiln.vercel.app/

View on Hacker News