Notes from building it.
Field notes and product thinking from the team building Virtainer — written for the people who run it.
Open-sourcing cloud-image-inspectorLatestcloud-image-inspector reads a cloud disk image without booting or mounting it and reports the OS, shells, privilege tool, init system and sshd facts that first-boot configuration depends on. Zero dependencies, Apache-2.0.5 minIntroducing Virtainer Free 1.1Virtainer Free 1.1 is on the stable channel. Every classic VM now runs on components we built ourselves, from the guest agent inside it to the reader that understands its image before first boot, and the release went through forty release candidates on real hardware to get here.4 minOpen-sourcing the Virtainer guest agentvirtainer-guest-agent is a single static binary that speaks the QEMU Guest Agent wire protocol over vsock on Cloud Hypervisor, adds an interactive Shell and automatic hot-plug onlining, and is released under Apache-2.0.6 minSnapshot a running classic VM in secondsVirtainer Free snapshots a classic VM while it keeps running. A snapshot is a qcow2 internal snapshot taken across all of the VM's disks in one transaction, and you choose how consistent the capture has to be.2 minAfter Apple, Docker agrees that AI agents belong in their own machineApple gave every Linux container its own virtual machine. Docker has now done the same for AI agent sessions. Both put that boundary on the machine you type on, which leaves the workloads that have to keep running somewhere else entirely.7 minRun DeepSeek Harness as an AppVM, step by stepDeepSeek Harness is a brand-new open source AI agent, moving fast and still in developer preview. Give it a machine of its own instead of your laptop, then reach it from any browser, including a phone or a tablet.6 minWriting a Dockerfile for an AppVM: nine principlesAn AppVM boots an ordinary OCI image as its own machine, so your Dockerfile skills carry over directly. Nine principles for writing one that behaves, each following from a single idea: the image is a machine's root filesystem and its only service.10 minTwo KVM escapes, one precondition: the machine is still the boundaryJanuscape and Zapscape are both guest-to-host escapes in KVM's shadow MMU, disclosed months apart in 2026. Both need the same thing from the attacker: a guest running virtual machines of its own. A container escape needs no such setup, and an AppVM never runs nested VMs. That gap is the argument.5 minApple container and Virtainer AppVM: the same ideaApple's container and Virtainer's AppVM reached the same idea on their own: boot a container image as its own virtual machine. Apple built it for the Mac. Virtainer built it for x86_64 servers, where it also runs classic Linux VMs on the same host.4 minAppVM: The middle ground has two doorsThe microVM is a real middle ground between VMs and containers. Most tools reach it from the container side and bring the ecosystem along. Virtainer comes from the machine side, and here is what that actually buys you.4 minVirtainer is now publicVirtainer Free is free and generally available: turn any Linux cloud image or Docker image into a hardware-isolated virtual machine on a single host you run yourself.1 min