Launch a whole Linux computer
Each workload gets a Firecracker microVM with its own kernel, resources, network, and lifespan.
PERSONAL FIRECRACKER RESEARCH PROJECT
A tiny computer
for every experiment.
Capsule is an early attempt at giving AI agents isolated Linux microVMs on hardware you control. It is a working lab project, not a finished platform.
Built to learn in public.
APIs, images, and workflows will change.
1 hostlab-scale by design
1 binarystill changing quickly
0 SLAno support guarantee
v0expect rough edges
Small on the outside.
Serious machinery
on the inside.
01
Let your agent get to work
Run commands and move files through private vsock. No guest SSH service or password pile.
Leave no mess behind
TTL reaping, conservative garbage collection, snapshots, and checksummed images keep the host tidy.
security is the experiment
Isolation is the goal.
Not a warranty.
Capsule explores stronger boundaries for agent workloads using Firecracker, jailer, cgroups, and explicit network policy. It has not received an independent security audit.
- ✓ Jailed process, UID, cgroup, network, and disk
- ✓ Scoped, expiring, revocable access tokens
- ✓ Named egress policies and structured audit logs
YOUR AGENTbusy building something useful
CAPSULEits own Linux kernel
JAILERhard resource boundaries
YOUR HOSTstill yours
Curious builders only.
Enter the lab
carefully.
Use a disposable test machine and nonsensitive workloads. Setup Center explains proposed host changes, but upgrades may break state and the project may change without migration support.
CAPSULE FIELD GUIDEEARLY DEVELOPMENT
- 1
chmod +x capsule-linux-amd64 - 2
sudo ./capsule-linux-amd64 install - 3
capsule ui
Experimental lab build · no production use · no stability promise