AI Agent Sandboxes: Why a Single Container Isn't Enough
How to isolate code written by AI agents: comparing containers, gVisor, and KVM, examining the threat model, and running virtual sandboxes in seconds.
Architecture, networking, and operations notes for microsrv VMs, containers, and scale-to-zero.
Serverless VMs in microsrv: scale-from-zero on network traffic
In scale-to-zero mode the VM sleeps without traffic and wakes in 100-250 ms on the first request.
Hermes Agent: a Self-Improving AI Agent in a Container on microsrv
What Hermes Agent from Nous Research can do and how to run it in a container on microsrv: official image pinned by digest, gateway mode, dashboard with basic auth, and publishing via an HTTPS gateway.
Hybrid Workloads in a Single VPC: Combining Containers and VMs in microsrv
How to pair the density of containers with the flexibility of KVM virtual machines in a unified private network using a self-hosted Git & CI/CD stack.
Live VM Migration Explained: Moving RAM and Processes Without Downtime
How live migration works: pre-copy, dirty pages, stop-and-copy, cold restart as a fallback, and the way the microsrv orchestrator migrates VMs before Spot hosts are reclaimed.
Replicated VM Storage: Keeping Disks Alive When Hosts Fail
How ephemeral disks differ from replicated volumes, what RPO looks like after a hard failure, why synchronization must begin before migration, and how microsrv preserves filesystems when an interruptible host is reclaimed.
SSH Without a Public IP: Why VM Access Gateways Matter
The risks of exposing port 22, the differences between a bastion or jump host and an SSH gateway, and a stable ssh <vm>@msrv.space address across live migrations.
eBPF Networking in microsrv: Preserving IPs, Sockets, and Gateways During VM Migration
microsrv's network layer explained: decoupling guest addresses from physical hosts, isolated VPCs, SSH gateway and HTTPS gateway, and preserved TCP sessions during live migration.
What Are Preemptible (Spot) Virtual Machines? Benefits, Risks, and Architecture
How Spot and preemptible instances work: where discounts of up to 80% come from, how eviction notices work, what limitations apply, and how to design applications for interruptible capacity.