my-app · booting
My app
AcmeDocsPricing
Ship it fast.Built this morning.Get started
Fast
Safe
Yours
bash — my-app
[ 0.000] microVM starting
[ 0.094] own kernel up
[ 0.162] dinit is pid 1
[ 0.241] answering ssh
Fast.
Booted in seconds.
Safe.
Sealed at the hardware. Its own kernel, filesystem and network stack.
Yours.
Root is handed to you. Keep it for as long as you need.
Isolation
Its own kernel. A hardware boundary.
Your machine is a real VM, not a container. There is no shared filesystem and no shared process list.
- A physical server.
- KVM turns its hardware into boundaries.
- Each VM boots its own kernel.
- A reach for a neighbour stops at KVM.
- Delete the machine. The disk goes with it.
Network
Decide what gets in or out.
A machine talks to nothing until you say so. Every attempt is logged, allowed or blocked.
policy · my-appup 00:14:07
deb.debian.orgallow
github.comblock
everything elsedrop
Your turn. Flip a rule, then send a packet.
egress loglive
Integrations
Keys never touch the VM.
Clone a private repo or call ChatGPT and Claude from inside the machine. The credential is added on the way out, by the host.
Upgrades
Upgrades don't drop you.
dpipe owns the connection, not dproxy. Shipping a new dproxy disconnects nobody.
session connectedconnected for 00:00:00bytes dropped 0dproxy v1
What it's for
- it's a computer · 2 vCPU / 4 GB