smolvm: Running Untrusted Python & JavaScript in a Secure Sandbox
Introduction
FAQ
What is smolvm?
smolvm is an open-source tool that provides a sandboxed environment for running untrusted Python and JavaScript code, with memory and CPU limits and no network access.
How does smolvm compare to Docker?
smolvm is lighter and faster than Docker because it uses microVM technology, offering stronger isolation with lower resource consumption, making it suitable for short-lived tasks.
Can smolvm be used in production?
Yes, it can be used in production to safely run user-provided code, especially in data transformation or custom task execution, but hardware requirements like /dev/kvm support must be considered.
Source: Simon Willison (LLM & tools)
AI-assisted content, human-reviewed.