Simple application VMs (hypervisor-based sandbox) based on Nix package manager.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
Jonas Heinrich 17f17be784 fix ethernet device pci slot conflict 1 year ago
.github Remove donate 2 years ago
docs docs/installation: fix typo 1 year ago
dot-desktop-fuse Switch to buildGoModule 3 years ago
nixos ooops, nixos cannot compute 3 years ago
os Build appvm from ../default.nix 3 years ago
patches virt-viewer: use title as subtitle 3 years ago
.envrc [feat] added environment files 3 years ago
.gitignore Update .gitignore 3 years ago
LICENSE Add LICENSE 5 years ago
Makefile Support remove run with `nix run` 3 years ago
README.md Update README.md 1 year ago
appvm.go Use per-VM qcow2, remove it after the start 1 year ago
base.nix.go Make sure xmonad always uses the latest libc 1 year ago
builtin.go Update builtin chromium appvm description 3 years ago
default.nix Update vendorSha256 1 year ago
generate.go Avoid of changing current work directory 3 years ago
go.mod Update go-libvirt 2 years ago
go.sum Update go-libvirt 2 years ago
local.nix.template.go Do no enable anything in default local.nix 3 years ago
shell.nix [feat] added environment files 3 years ago
xml.go fix ethernet device pci slot conflict 1 year ago

README.md

Documentation Status

Nix application VMs: security through virtualization

Simple application VMs (hypervisor-based sandbox) based on Nix package manager.

Uses one read-only /nix directory for all appvms. So creating a new appvm (but not first) is just about one minute.

appvm screenshot

Installation

See related documentation.

Usage

Search for applications

$ appvm search chromium

Run application

$ appvm start chromium
$ # ... long wait for first time, because we need to collect a lot of packages

Synchronize remote repos for applications

$ appvm sync

You can customize local settings in ~/.config/appvm/nix/local.nix.

Default hotkey to release cursor: ctrl+alt.

Shared directory

$ ls appvm/chromium
foo.tar.gz
bar.tar.gz

Close VM

$ appvm stop chromium

Automatic ballooning

Add this command:

$ appvm autoballoon

to crontab like that:

$ crontab -l
* * * * * /home/user/dev/go/bin/appvm autoballoon