Show HN: SSH-hypervisor – like SSH, but each user gets their own microVM

https://ekzhang.substack.com/p/ssh-hypervisor-simcity-for-vms

34•ekzhang•4mo ago

This is a project I made over the weekend. What if when you SSH'd into a machine, instead of giving you a user login, it would provision a new microVM just for you?

It's like a little SimCity for VMs.

This turned out to be a lot of fun, and I've wanted to make my own custom SSH server for a while now, with its fancy progress bars and color animations. The hardest part was definitely debugging VM setup, boot, and networking though! Compiling the Linux kernel with all the right configs was difficult. For a while I had issues with silent hangs on boot due to lack of available system entropy, on Linux <4.19. Anyway, I wrote a bit about my struggles. :D

I managed to bundle everything (vmlinux 6.1, firecracker, SSH server, iptables/bridge/masquerade) into a single, statically-linked binary for x86_64/aarch64. It takes the kernel rootfs as a command-line argument.

Comments

iberator•4mo ago

Interesting. I hope you know about busybox? This could boot ultra fast.

vimredo•4mo ago

It uses Alpine Linux, which includes busybox as coreutils by default.

zikani_03•4mo ago

This is a cool project! Would be interesting if this could be used to help teach and learn linux to a group of students. No need to muck about with user accounts and one could add a proxy layer and map each username to a dynamic DNS entry to help students host their own temporary webserver.

ekzhang•4mo ago

Thanks! I think that's a great idea. Containers are nice, but there's nothing quite like a "real" VM system in terms of learning + developing, and they can be very cheap if you're OK with the performance hit from nested virtualization :)

Another idea I had is to customize the rootfs. It boots Alpine right now, but should be trivial to change it to anything else (and it only takes ~5 seconds to build!).

Jim Fan calls pixels the ultimate motor controller

Exploring a Modern SMTPE 2110 Broadcast Truck with My Dad

AI UX Playground: Real-world examples of AI interaction design

The Field Guide to Design Futures

The Other Leverage in Software and AI

AUR malware scanner written in Rust

Free FFmpeg API [video]

Are AI agents ready for the workplace? A new benchmark raises doubts

Show HN: AI Watermark and Stego Scanner

Clarity vs. complexity: the invisible work of subtraction

Solid-State Freezer Needs No Refrigerants

Ask HN: Will LLMs/AI Decrease Human Intelligence and Make Expertise a Commodity?

From Zero to Hero: A Brief Introduction to Spring Boot

NSA detected phone call between foreign intelligence and person close to Trump

How to Fake a Robotics Result

It's time for the world to boycott the US

Show HN: Semantic Search for terminal commands in the Browser (No Back end)

The AI CEO Experiment

Speed up responses with fast mode

MS-DOS game copy protection and cracks

Updates on GNU/Hurd progress [video]

Epstein took a photo of his 2015 dinner with Zuckerberg and Musk

MyFlames: View MySQL execution plans as interactive FlameGraphs and BarCharts

Show HN: LLM of Babel

A modern iperf3 alternative with a live TUI, multi-client server, QUIC support

Famfamfam Silk icons – also with CSS spritesheet

Apple is the only Big Tech company whose capex declined last quarter

Reverse-Engineering Raiders of the Lost Ark for the Atari 2600

Show HN: Deterministic NDJSON audit logs – v1.2 update (structural gaps)

The Greater Copenhagen Region could be your friend's next career move