Replit rebuilt its sandbox engine with microVMs
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Replit rebuilt its sandbox engine around KVM-based microVMs (using Cloud Hypervisor) instead of shared-kernel Docker containers, giving each sandbox its own Linux kernel. The company says this strengthens isolation against kernel vulnerabilities, supports Docker-in-sandbox workloads safely, and enables cross-cloud portability.