vmsan

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command vmsan create --connect

Get Started Star on GitHub

Terminal

$ curl -fsSL https://vmsan.dev/install | bash

One command is all it takes

Install vmsan

Install the CLI in seconds with a single command.

Terminal

$ curl -fsSL https://vmsan.dev/install | bash
✔ vmsan installed successfully
$ vmsan --version
vmsan 0.1.0

Or jump straight in

Add --connect to land in a shell instantly.

Terminal

$ vmsan create --connect
✔ VM created: vm-f91c4e0
✔ Connected to vm-f91c4e0
root@vm-f91c4e0:~#

Everything you need for secure workloads.

vmsan wraps Firecracker with a batteries-included CLI. No boilerplate. No complex infrastructure. Just fast, secure VMs.

Millisecond boot times

Firecracker microVMs boot in a fraction of a second. Minimal memory overhead for maximum efficiency.

Hardened by default

Jailer chroot, seccomp-bpf filters, PID namespaces, and cgroups. Enterprise-grade security out of the box.

Native interactive shell

Connect directly to running VMs via a seamless WebSocket PTY terminal. Leave SSH behind.

Instant file sync

Push and pull files securely over the agent API. No SCP or complex folder mounting required.

Multi-runtime ready

Start instantly with optimized Node or Python runtimes, or bring your own custom Docker image.

API-first design

Parse data cleanly with built-in --json flags. Designed specifically for CI/CD, scripting, and automation.

See it in action

Powerful isolation primitives wrapped in an intuitive developer experience.

Granular network control

Enforce strict allow-all or deny-all rules. Route traffic via custom domain and CIDR policies. Throttle bandwidth instantly.

Network Isolation

$ vmsan create \
    --network-policy custom \
    --allowed-domain "*.github.com" \
    --denied-cidr "10.0.0.0/8" \
    --bandwidth 50mbit

Any container as a VM

Run any Docker or OCI image natively. Boot it as a secure Firecracker microVM. Cached locally for instant reuse.

Docker Support

$ vmsan create --from-image python:3.13-slim
$ vmsan create --from-image node:22-alpine
$ vmsan create --from-image myorg/app:latest

Zero-config interactive shell

Access your VMs with a full WebSocket PTY terminal. Upload and download files effortlessly. No SSH keys required.

Shell & Files

$ vmsan connect vm-a3f7b2c
$ vmsan upload vm-a3f7b2c ./app.js /app.js
$ vmsan download vm-a3f7b2c /app.log ./

Built for automation

Every single command supports structured --json output. Script your infrastructure. Automate your workflows.

JSON Output

$ vmsan list --json
[{"id":"vm-a3f7b2c","status":"running",
  "runtime":"node22","memory":128,
  "cpus":1,"ip":"172.16.1.2",
  "networkPolicy":"allow-all"}]

Ready to build secure workloads?

Download vmsan today. Spin up your first Firecracker microVM in under a second.

Read the documentation Star on GitHub