Simple application VMs (hypervisor-based sandbox) based on Nix package manager.
Du kannst nicht mehr als 25 Themen auswählen Themen müssen mit entweder einem Buchstaben oder einer Ziffer beginnen. Sie können Bindestriche („-“) enthalten und bis zu 35 Zeichen lang sein.
dump_stack() 9142fe53c6
Remove donate
vor 4 Monaten
.github Remove donate vor 4 Monaten
docs Updated installation instructions for NixOS vor 10 Monaten
dot-desktop-fuse Switch to buildGoModule vor 10 Monaten
nixos ooops, nixos cannot compute vor 10 Monaten
os Build appvm from ../default.nix vor 1 Jahr
patches virt-viewer: use title as subtitle vor 1 Jahr
.envrc [feat] added environment files vor 1 Jahr
.gitignore Update .gitignore vor 1 Jahr
LICENSE Add LICENSE vor 2 Jahren
Makefile Support remove run with `nix run` vor 1 Jahr
README.md Update screenshot vor 1 Jahr
appvm.go fix: stat made qcow2 image creation return error every time vor 10 Monaten
base.nix.go Do not specify session explicitly vor 1 Jahr
builtin.go Update builtin chromium appvm description vor 1 Jahr
default.nix nixpkgs-able default.nix vor 10 Monaten
generate.go Avoid of changing current work directory vor 1 Jahr
go.mod Switch to buildGoModule vor 10 Monaten
go.sum Switch to buildGoModule vor 10 Monaten
local.nix.template.go Do no enable anything in default local.nix vor 1 Jahr
shell.nix [feat] added environment files vor 1 Jahr
xml.go Add --network switch to select a networking model (#22) vor 1 Jahr

README.md

Documentation Status Donate Donate

Nix application VMs: security through virtualization

Simple application VMs (hypervisor-based sandbox) based on Nix package manager.

Uses one read-only /nix directory for all appvms. So creating a new appvm (but not first) is just about one minute.

appvm screenshot

Installation

See related documentation.

Usage

Search for applications

$ appvm search chromium

Run application

$ appvm start chromium
$ # ... long wait for first time, because we need to collect a lot of packages

Synchronize remote repos for applications

$ appvm sync

You can customize local settings in ~/.config/appvm/nix/local.nix.

Default hotkey to release cursor: ctrl+alt.

Shared directory

$ ls appvm/chromium
foo.tar.gz
bar.tar.gz

Close VM

$ appvm stop chromium

Automatic ballooning

Add this command:

$ appvm autoballoon

to crontab like that:

$ crontab -l
* * * * * /home/user/dev/go/bin/appvm autoballoon