@nativeharness/sandbox-microsandbox

Hardware isolation. microVMs through MicroSandbox — a hypervisor boundary rather than a shared kernel.

npm install @nativeharness/sandbox-microsandbox

import { MicrosandboxProvider } from "@nativeharness/sandbox-microsandbox";

const sandbox = new MicrosandboxProvider();
const { ok, reason } = await sandbox.check();   // says whether this host has /dev/kvm

Strictly stronger than a container, and the right choice wherever the host has /dev/kvm — which most cloud instances do not. check() tells you which you are on, so an application can prefer this and fall back.

There is no bind mount into a microVM, so files are hydrated through the guest filesystem API and collected by walking the tree inside the guest. Same SandboxProvider interface, same 41-case conformance suite.

Part of nativeharness — the agent harness native to your app. Apache-2.0 · docs · source