AI Agent Sandboxes: Why a Single Container Isn't Enough
How to isolate code written by AI agents: comparing containers, gVisor, and KVM, examining the threat model, and running virtual sandboxes in seconds.
Architecture, networking, and operations notes for microsrv VMs, containers, and scale-to-zero.
Serverless VMs in microsrv: scale-from-zero on network traffic
In scale-to-zero mode the VM sleeps without traffic and wakes in 100-250 ms on the first request.
Hybrid Workloads in a Single VPC: Combining Containers and VMs in microsrv
How to pair the density of containers with the flexibility of KVM virtual machines in a unified private network using a self-hosted Git & CI/CD stack.
Live VM Migration Explained: Moving RAM and Processes Without Downtime
How live migration works: pre-copy, dirty pages, stop-and-copy, cold restart as a fallback, and the way the microsrv orchestrator migrates VMs before Spot hosts are reclaimed.
What Are Preemptible (Spot) Virtual Machines? Benefits, Risks, and Architecture
How Spot and preemptible instances work: where discounts of up to 80% come from, how eviction notices work, what limitations apply, and how to design applications for interruptible capacity.