HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
smol-machines
smolvm
Rust2026–2026
smol-machines / smolvm

smolvm

An embeddable, portable, branchable virtual machine to safely run Agents locally.

10Distinct people
43Mentions
0Explicit recommenders
7.1KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

An embeddable, portable, branchable virtual machine to safely run Agents locally.

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.

Ask HN: What are you working on? (November 2026) direct repository linkDebated

The discussion centers on the tension between leveraging AI for rapid development and maintaining architectural control, with users debating whether manual implementation of complex systems remains valuable for learning. A significant sub-thread highlights the severe financial impact large language models have on content creators, sparking debate over potential mitigation strategies.

1068 readable replies · Supporting reply 1 · Supporting reply 2 · Supporting reply 3 · Supporting reply 4

Mentions over time

HN mentions by month43 dated mentions

Observed mentions: 2026-01-26 15:01:34 UTC to 2026-10-23 08:47:49 UTC.

02468102026-01-01 00:00:00 UTC to 2026-02-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 commentsJan 20262026-02-01 00:00:00 UTC to 2026-03-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2026-03-01 00:00:00 UTC to 2026-04-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2026-04-01 00:00:00 UTC to 2026-05-01 00:00:00 UTC (exclusive): 7 mentions; 1 submissions, 6 comments2026-05-01 00:00:00 UTC to 2026-06-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 commentsMay 20262026-06-01 00:00:00 UTC to 2026-07-01 00:00:00 UTC (exclusive): 10 mentions; 0 submissions, 10 comments2026-07-01 00:00:00 UTC to 2026-08-01 00:00:00 UTC (exclusive): 7 mentions; 0 submissions, 7 comments2026-08-01 00:00:00 UTC to 2026-09-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2026-09-01 00:00:00 UTC to 2026-10-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments2026-10-01 00:00:00 UTC to 2026-11-01 00:00:00 UTC (exclusive): 6 mentions; 0 submissions, 6 commentsOct 2026

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
Jan 20262026-01-01 00:00:00 UTC2026-02-01 00:00:00 UTC202
Feb 20262026-02-01 00:00:00 UTC2026-03-01 00:00:00 UTC101
Mar 20262026-03-01 00:00:00 UTC2026-04-01 00:00:00 UTC101
Apr 20262026-04-01 00:00:00 UTC2026-05-01 00:00:00 UTC716
May 20262026-05-01 00:00:00 UTC2026-06-01 00:00:00 UTC202
Jun 20262026-06-01 00:00:00 UTC2026-07-01 00:00:00 UTC10010
Jul 20262026-07-01 00:00:00 UTC2026-08-01 00:00:00 UTC707
Aug 20262026-08-01 00:00:00 UTC2026-09-01 00:00:00 UTC404
Sep 20262026-09-01 00:00:00 UTC2026-10-01 00:00:00 UTC303
Oct 20262026-10-01 00:00:00 UTC2026-11-01 00:00:00 UTC606

What Hacker News says

43 sources
hey simon, smol machines actually support exactly those things across macs,linux, windows btw: https://github.com/smol-machines/smolvm/blob/main/AGENTS.md#... here's a snippet of how it looks like to configure that: [network] allow_hosts = ["api.github.com"] # hostname, also allows its subdomains allow_host_patterns = ["example.com", "*.npmjs.org"] # exact names, or *. for subdomains only allow_cidrs = ["10.0.0.0/8", "1.1.1.1"] # IP ranges or single IPs [[network.credentials]] name = "github" environment_variable = "GITHUB_TOKEN"
In MXC - a sandboxed code execution system
It depends on your threat model but I think it's a good reminder either way. I recently discovered SmolVM <https://github.com/smol-machines/smolvm> and it looks like a pretty good sweet spot for usability and isolation. There are so many sandboxing technologies to pick from and understand. I've been using (rootless) Podman which gives me some basic assurances that it will stay in its designated directory and not run tools on my system directly but I have no limits on the network and with an internal UID/GID of 0:0 I have not done myself any favours. This is the same level of protection one would implement to keep a poorly written bash script from wreaking havoc and that's about it.
In Show HN: Pi pod – Run your pi coding agent in sandboxes on your own server
At first, I had thought what is its point, but this post made me wonder about the fact that I myself don't use sandboxes (even though I very much think that they are a good option and recommend it to other people!) I tried to use smolvm[0] on macOS and although its really great but then it was still a bit of an hassle to install maki.sh and It wasn't an entirely smooth sailing process in the start and I can see why there is some initial friction to it. So I am gonna try it out as well and I think that this might be damn effective at what its trying to solve (simplifying sandboxing to be the norm rather than the exception) For example. Even within Smolvm, I had to install maki (debug the issues in installing that as there were some errors), setup my api key in that, install gh, login to gh to finally have a working sandbox that can have my
Read the rest
environment and I imagine that moving files from VM to host and vice versa is a tad-bit complicated without compromising on security (I think that I just create a private github repo for this purpose if its a coding project, which also helps in actually cataloging all the projects for myself as well!) and in some way, I think that this can act as the bridge course between sandboxing as well, I mean, I have finally introduced sandboxing on my local machine (although for sometimes, I just treat my vps machines as sandbox but nonetheless there are times when I just run maki on my local machine and I think that even with smolvm I might still have this), I definitely see the point of it. I haven't really tried it yet as it made me go rather on the smolvm side of things but hopefully going to try out this This seems like a project and I have starred the repo, good day! [0]: https://github.com/smol-machines/smolvm
In Show HN: Autobox – Make your agents sandbox themselves
You can even go a step further and run the container in a VM, such as with Docker Sandbox or the krun runtime in Podman. There's also smolvm which is a nice minimal microvm manager based on libkrun: https://github.com/smol-machines/smolvm. I vibe coded a little shell utility for building and running OCI images for the Pi harness using it (easy enough to do manually, but the automation just makes it a couple quick commands rather than digging through documentation): https://github.com/neuroblaze/smol-pi
In Grok CLI uploaded the whole home directory to GCS

Showing the 15 most recent of 43 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.