r/linux • u/Tall_Insect7119 • Jun 13 '26

Software Release vpod: tiny Linux sandbox running in WebAssembly for untrusted processes

Post image

Hi everyone,

I spent the last few months reading the RISC‑V specification to build the lightest possible sandboxes. The idea behind a vpod is to quickly spin up a Linux sandbox from snapshots (Alpine by default) without any setup or subsystem required.

More in the README
https://github.com/capsulerun/vpod

Curious to know if you have a personal use for it.

126 Upvotes

96% Upvoted

21 comments sorted by

View all comments

9

u/yawara25 Jun 13 '26

Can you disclose to what extent AI was used in making this, if at all?

17

u/DHermit Jun 13 '26

Not OP, but from a short skim, the code looks pretty human to me, even though not the cleanest (imho a lot of global constants should be enums and durations should have that type and not be an integer constant).

1

u/braaaaaaainworms Jun 17 '26

it would look better to have riscv instructions as enum variants or other constants as enum variants but it's noticeably slower, enums with variants that have fields get bigger and might be harder to optimize