MicroCloud

Microsandbox is a local-first microVM runtime and library for running untrusted workloads, including AI-agent tasks, user code, plugins, CI jobs, development environments, scrapers, and automation. It uses hardware-level isolation and runs standard OCI container images from registries such as Docker Hub and GHCR, with Docker-like image, command, shell, and volume workflows. The project provides SDKs for TypeScript, Rust, Python, Go, and Ruby, along with a CLI for booting and controlling sandboxes. Applications can create microVMs as child processes without a setup server or long-running daemon; sandboxes can also run detached for long-lived sessions. Agent Skills and an MCP server support agent-created sandboxes, and the project documents secret handling intended to keep keys out of the VM. It runs on Linux, macOS, and Windows, with platform-specific virtualization requirements, and is described as beta software.

Firecracker is an open-source virtual machine monitor developed by Amazon Web Services for running secure, multi-tenant container and function workloads in lightweight virtual machines called microVMs. It uses Linux KVM for hardware-virtualization isolation and a minimalist device model with five emulated devices, combining strong isolation with container-like startup speed and resource efficiency. A companion jailer adds a further Linux user-space security boundary. Firecracker is controlled through a REST API for configuring and starting microVMs, managing metadata, and applying network and storage rate limits. It supports Linux hosts and guests, OSv guests, and 64-bit Intel, AMD, and Arm processors with hardware virtualization, and is written in Rust. It is used in services including AWS Lambda, can be integrated with container ecosystems, and is distributed under the Apache License 2.0.

Cloudreve is a self-hosted file management and sharing system developed by the Cloudreve project. It stores files in local or remote storage providers, including OneDrive and S3-compatible services, and provides a web interface for uploading, browsing, downloading, previewing, editing, and sharing files. It supports background downloads through Aria2 or qBittorrent, WebDAV across storage providers, resumable parallel uploads, archive handling, metadata and tag search, multi-user groups, expiring share links, and online editing of text, diagrams, Markdown, images, and Office documents. The project is distributed as an all-in-one package, can be deployed locally or in production, and is built with Go, Gin, and ent alongside React, Redux, and Material-UI. It is licensed under GPLv3.

OpenCloud is an open-source, self-hosted file-storage and collaboration platform developed by the Heinlein Group. It is descended from ownCloud Infinite Scale and rewritten in Go, providing file management and sharing for teams and organizations without requiring a separate database instance or schema migrations. The platform supports optional full-text search, browser-based document editing through an integrated office suite, access controls, two-factor authentication, encryption, and file versioning. It is available for on-premises operation or as a SaaS offering through selected partners, with a cloud-native architecture intended for large data volumes and growing teams.

Talos Linux is a modern, minimal Linux distribution built for running Kubernetes. Developed and supported by Sidero Labs, it is immutable and hardened, with all system management performed through an API rather than a shell or interactive console. API access uses mutual TLS authentication, while immutable infrastructure and atomic updates are intended to reduce configuration drift and support predictable Kubernetes and Linux updates. The project is fully open source and production-ready.