[{"data":1,"prerenderedAt":139},["ShallowReactive",2],{"project-47828636":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":33,"aspects":34,"strip":37,"post_text":38,"what":39,"said":57,"maker_in_thread":86,"shape":91,"grid":94,"attempts":100,"same_week":101,"maker_shows":131,"maker_hidden":132,"reader_version":133,"card":134},"47828636","Clone","A small Rust VMM, forks VMs in under 20ms via CoW","title","Show HN: Clone, a small Rust VMM, forks VMs in under 20ms via CoW","https:\u002F\u002Fgithub.com\u002Funixshells\u002Fclone","github.com","rasengan",1776640959,2026,11,3,2868,4366,66,"shown","infrastructure","virtual machine monitor","other",[24,25,26,27],"rust vmm","copy on write vm","fast vm fork","multi-tenant shell accounts","quiet",null,{"positive":31,"neutral":32,"mixed":31,"critical":32},0,1,2,{"performance":35,"design":36},{"positive":31,"critical":32},{"positive":31,"critical":31},[32,15,31],"We needed a secure, multi-tenant way to offer shell accounts to users, but most VMMs were using too much memory and containers are unsafe. With clone, VMs are now more memory efficient than containers in most cases.\n\nSince many other projects on HN looked like they were doing this too, open sourcing this was the right thing to do.\n\nFeel free to use in whole or in part as you see fit!",{"problem":40,"audience":29,"pricing":29,"motivation":46,"time_to_build":29,"stack":50,"openness":55,"stage":56,"team_size":56},{"value":41,"source":42,"evidence":43},"Offering secure multi-tenant shell accounts without high memory use of VMMs or the unsafety of containers","maker",[44],{"id":45},"post",{"value":47,"source":42,"evidence":48},"Needed a secure, multi-tenant way to offer shell accounts to users",[49],{"id":45},[51],{"value":52,"source":42,"evidence":53},"Rust",[54],{"id":45},"open_source","unknown",{"praise":58,"objections":67,"requests":75,"questions":76,"alternatives":81},[59],{"value":60,"source":61,"evidence":62},"Design of optimizing warm state over cold boot fits dev shells","commenter",[63],{"id":64,"by":65,"text":66},"47835251","steffs","The part that stands out is that you are optimizing for warm state instead of cold boot. That feels right for dev shells. If the workload is repeated short lived environments,…",[68],{"value":69,"source":61,"evidence":70},"Comparison table's memory claims against Firecracker are questioned; Firecracker diff snapshots with copy-on-write could share memory",[71],{"id":72,"by":73,"text":74},"47830135","laurencerowe","Thanks for sharing! I'm not sure your table under Why Clone is quite correct. 10x 512MB idle VMs should not take 5GB on Firecracker if they are started from snapshots since the…",[],[77],{"value":78,"source":61,"evidence":79},"How is template drift handled over time, and can warm templates be patched without losing memory sharing?",[80],{"id":64,"by":65,"text":66},[82],{"value":83,"source":61,"evidence":84},"Firecracker",[85],{"id":72,"by":73,"text":74},{"comments":32,"answered":32,"key":87},[88],{"id":89,"text":90},"47841010","Great question! We rebuild if there's a security update or otherwise every few weeks. We're working on a better method, but right now a few templates can be kept warm so users…",{"commenters":15,"max_depth":33,"maker_replies":32,"first_comment_mins":92,"lifespan_hours":93},250,22,[95,97,99],[72,31,32,96,73,31],"project\u002Fcritical\u002Fperformance",[64,32,15,98,65,31],"project\u002Fneutral\u002Fdesign",[89,32,31,98,11,32],[],[102,107,112,117,122,126],{"id":103,"name":104,"points":105,"category":106},"47808268","Smol machines",499,"dev_tools",{"id":108,"name":109,"points":110,"category":111},"47812341","interval-calculator",314,"learning_science",{"id":113,"name":114,"points":115,"category":116},"47847558","VidStudio",301,"creative",{"id":118,"name":119,"points":120,"category":121},"47807809","PanicLock",265,"security_privacy",{"id":123,"name":124,"points":125,"category":20},"47849097","GoModel",217,{"id":127,"name":128,"points":129,"category":130},"47828896","trellis-mac",202,"ai",9,false,"v2",{"id":135,"name":5,"line":6,"ai":132,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":136,"maker":11,"domain":10,"tier":19,"attempts":31,"strip":137,"url":9,"mix":138,"praise":60,"objection":69,"sub":21},47828636,[24,25,26,27],"130",[31,32,31,32],1794036699013]