Simple application VMs (hypervisor-based sandbox) based on Nix package manager.
Go to file
msm-code c0801541b3
Fix random panics during autoballonning. (#17)
There is a race condition, when good behaving VMs will temporarily
truncate .memory_used to 0 bytes (update is not atomic).

Also, as a matter of principle, VMs should not crash the host,
ever.

Co-authored-by: msm <msm@cert.pl>
2020-03-30 21:53:02 +00:00
.github GitHub Actions: Use latest stable nixpkgs channel 2020-02-21 00:29:49 +00:00
docs Move installation guide to docs 2020-02-02 01:43:35 +00:00
dot-desktop-fuse Handle case when there's no actions in .desktop file 2020-01-09 23:07:37 +00:00
os Build appvm from ../default.nix 2020-01-22 01:18:25 +00:00
patches virt-viewer: use title as subtitle 2020-02-02 02:13:57 +00:00
.envrc [feat] added environment files 2019-12-29 18:27:02 +03:00
.gitignore Update .gitignore 2020-01-05 06:12:18 +00:00
appvm.go Fix random panics during autoballonning. (#17) 2020-03-30 21:53:02 +00:00
base.nix.go User host user id 2020-01-07 20:01:52 +00:00
builtin.go Update builtin chromium appvm description 2020-01-02 17:52:22 +00:00
default.nix virt-viewer: use title as subtitle 2020-02-02 02:13:57 +00:00
deps.nix Add missed deps 2020-01-08 11:16:14 +00:00
generate.go Avoid of changing current work directory 2020-01-09 23:13:48 +00:00
go.mod go modules 2019-12-30 15:55:00 +00:00
go.sum go modules 2019-12-30 15:55:00 +00:00
LICENSE Add LICENSE 2018-06-30 22:15:11 +00:00
local.nix.template.go Do no enable anything in default local.nix 2020-01-05 08:55:36 +00:00
Makefile Support remove run with nix run 2020-01-08 20:52:29 +00:00
README.md Update screenshot 2020-02-02 02:55:37 +00:00
shell.nix [feat] added environment files 2019-12-29 18:27:02 +03:00
xml.go Use default machine 2020-01-28 00:12:48 +00:00

Documentation Status Donate Donate

Nix application VMs: security through virtualization

Simple application VMs (hypervisor-based sandbox) based on Nix package manager.

Uses one read-only /nix directory for all appvms. So creating a new appvm (but not first) is just about one minute.

appvm screenshot

Installation

See related documentation.

Usage

Search for applications

$ appvm search chromium

Run application

$ appvm start chromium
$ # ... long wait for first time, because we need to collect a lot of packages

Synchronize remote repos for applications

$ appvm sync

You can customize local settings in ~/.config/appvm/nix/local.nix.

Default hotkey to release cursor: ctrl+alt.

Shared directory

$ ls appvm/chromium
foo.tar.gz
bar.tar.gz

Close VM

$ appvm stop chromium

Automatic ballooning

Add this command:

$ appvm autoballoon

to crontab like that:

$ crontab -l
* * * * * /home/user/dev/go/bin/appvm autoballoon