back to microsandbox

compare

microsandbox vs firecracker

reviewed

microsandbox gives you a sandbox runtime ready to embed in an application. Firecracker gives you the virtual machine monitor for building that platform yourself. both are Apache-2.0 and isolate workloads in microVMs. [1][24][26]

microsandbox supplies image pulls, commands, files, snapshots, credentials, and network policy through its SDKs. Firecracker exposes VM configuration and lifecycle; you supply the guest kernel, root filesystem, and surrounding services. [1][25]

Firecracker runs on Linux with KVM. microsandbox also runs on macOS and Windows, and offers a separate hosted cloud backend in private beta. [1][20][26]

microsandbox
local + cloud
firecracker
microVM monitor
product
complete sandbox runtime and SDKs [25]
virtual machine monitor [1]
host platforms
macOS · Linux · Windows [26]
Linux with KVM [1]
license
apache 2.0 runtime and SDKs [26]
Apache-2.0 [1]
local price
free to run on your hardware · no account required [23][26]
free VMM; you provision and operate the platform [1]
images
pull OCI images from standard registries [25]
provide a guest kernel and root filesystem [1]
application interface
rust · typescript · python · go · ruby · CLI [25][26]
VM configuration and lifecycle API [1]
snapshots
local snapshots save disk state, or disk, memory, and running processes with --full. cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore. [21]
VM state and memory snapshots; manage associated disk files separately [2]
policy and credentials
host-side egress controls and destination-bound secrets [28][29]
integrating platform supplies application policy [1]
deployment
local runtime · microsandbox cloud (private beta, access by request) [20]
you supply hosts and surrounding services [1]
pick microsandbox

choose microsandbox when

  • you need a working sandbox SDK instead of building a platform around a VMM. [25]
  • you want OCI images, local checkpoints, and policy in one runtime. [21][25]
  • developers use Mac or Windows machines as well as Linux. [26]
pick firecracker

choose firecracker when

  • you are building a Linux microVM platform and need direct kernel, disk, and device control. [1]
  • you intend to operate the image pipeline, networking, and host fleet. [1]

01

libkrun vs Firecracker

microsandbox uses libkrun’s embeddable virtualization library. Firecracker exposes its own VMM API. [1][3] the practical difference is the software around that layer: microsandbox already provides the application-facing runtime and language SDKs. [25]

02

a VM snapshot still needs a storage workflow

Firecracker captures memory and VM state, while its integrating platform manages the backing disks and snapshot files. [2] microsandbox packages local disk snapshots, full checkpoints, and branching as CLI and SDK operations. compatible runtime and resource settings are required for full restores. [21]

microsandbox cloud currently supports disk snapshots from stopped persistent sandboxes. full memory checkpoints and branches remain local. [20][21]

common questions

does microsandbox use Firecracker?

no. it uses libkrun as its embeddable virtualization layer. both approaches create microVMs with separate guest kernels. [1][3][24]

can Firecracker run on macOS or Windows?

Firecracker requires Linux with KVM. microsandbox runs locally on macOS, Linux, and Windows. [1][26]

does Firecracker support snapshots?

yes. it saves VM state and memory; you manage the associated disk files and snapshot lifecycle. microsandbox exposes the combined workflow through its SDKs and CLI. [2][21]

run it locally.

put the boundary on your own machine before you choose anything else.

run it locally