Microterm runs Linux VM in any browser tab via WASM, RISCV64 emulation
Real Linux VM in your phone browser—runs Codex, SSH, Kubernetes, offline compute.
Lightweight, secure linux sandboxes for untrusted processes.
Full RISC-V Linux VM in WASM booting in under a second is genuinely wild.
Developers needing portable sandboxing for untrusted code
I spent the last few months reading the RISC‑V specification to build the lightest possible sandboxes. The idea behind a vpod is to quickly spin up a Linux sandbox from snapshots (Alpine by default) without any setup or subsystem required.
The trade-off for portability and security is raw CPU speed. So we don't expect it to match native workloads with Python or pip, for example.
More info is in the README https://github.com/capsulerun/vpod
Happy to answer any questions!
Real Linux VM in your phone browser—runs Codex, SSH, Kubernetes, offline compute.
Single-file VMs with network allow-listing beat Docker daemon complexity for simple sandboxing.
GDB stub on a 3KB embedded VM — debug bytecode on STM32 without leaving your workflow.
MCP sandbox isolation for agents; E2B/Modal/Docker/WASM backends already exist separately.
QEMU vGPU passthrough beats Firecracker for WebGL browser automation.
Multiple cursors on one Linux desktop beats screen-sharing for pair programming.