⚡ Sangsakala Proxy 🏠 Home
Skip to content
@cocoonstack

Cocoon Stack

All things about vm and orchestrator
README.md

Cocoon Stack

MicroVM platform for AI sandboxing, cloud desktops, and ephemeral dev environments. Built on Cloud Hypervisor / Firecracker and Kubernetes.

Documentation: cocoonstack.github.io

Runtime

Repository Description Docs
cocoon Lightweight MicroVM engine — OCI/cloud images, instant snapshot & clone, Windows 11 support, CNI networking, Docker-like CLI docs
cocoon-agent In-VM exec agent — vsock command channel behind cocoon vm exec / logs and per-clone identity reseed, no SSH docs
cocoon-macos macOS guests via QEMU + OpenCore + OVMF, reusing cocoon's cloudimg store and clone/snapshot model docs
cloud-hypervisor Patched Cloud Hypervisor fork — DISCARD fix, virtio-net ctrl_queue tolerance, upstream cherry-picks —
rust-hypervisor-firmware Patched UEFI firmware — ACPI ResetSystem fix for Windows graceful shutdown —
windows Windows 11 25H2 image factory — unattended QEMU build, Cloud Hypervisor validation (DHCP, RDP, SAC, ACPI shutdown), published to GHCR as OCI artifacts —

Kubernetes Integration

Repository Description Docs
vk-cocoon Virtual Kubelet provider — maps pod lifecycle to VM operations (run, clone, snapshot, hibernate) docs
cocoon-operator Kubernetes operator — CocoonSet and CocoonHibernation CRDs for stateful VM workflows docs
cocoon-webhook Admission webhook — sticky scheduling plus CocoonSet and CocoonHibernation validation docs
cocoon-net VPC-native networking — embedded DHCP plus alias IPs (GKE) or ENI secondary IPs (Volcengine) for direct VM DHCP docs
cocoon-common Shared Go library — CRD types, annotation contract, Kubernetes helpers, OCI registry + snapshot packages —

Sandbox

Repository Description Docs
sandbox Fast cold-boot AI-agent sandbox on cocoon — warm pools, in-guest daemon, per-node control plane, Go SDK docs
sandbox-operator Kubernetes operator and aggregated apiserver for the agents.x-k8s.io agent-sandbox API — warm microVM pools, claims through any Kubernetes SDK, etcd off the claim path docs
vk-sandbox Virtual Kubelet provider for sandbox-operator — serves runtime: sandboxd claims from node-local hot pools and publishes NodeInventory docs

Pinned Loading

  1. cocoon cocoon Public

    Lightweight MicroVM engine built on Cloud Hypervisor. Features include OCI and cloud image support, instant snapshot and clone via reflink, Windows 11 guest support, CNI networking with TC redirect…

    Go 256 16

  2. sandbox sandbox Public

    Fast cold-boot MicroVM sandboxes for AI agents on cocoon

    Go 85 10

  3. cocoon-macos cocoon-macos Public

    macOS VM engine for x86 Linux/KVM, built on cocoon. Boots real macOS guests (Sequoia, Tahoe) via QEMU + OpenCore + OVMF, with ghcr golden images, snapshot & clone, per-VM SMBIOS identity, CNI netwo…

    Go 55 4

  4. sandbox-operator sandbox-operator Public

    Aggregated Kubernetes apiserver and e2b-compatible data plane for warm-pooled agent sandboxes on microVMs. Sandboxes are served from per-node inventory with no per-sandbox etcd object and claimed f…

    Go 81 7

  5. scrcpy-rfb scrcpy-rfb Public

    Bridge scrcpy H.264 video and control to one RFB/VNC port: Open H.264 passthrough for TigerVNC/noVNC, Tight/JPEG fallback for ordinary clients

    C 28 4

  6. cocoon-operator cocoon-operator Public

    Kubernetes operator for stateful VM-backed pod workflows. Provides Hibernation CRD to suspend and wake VMs without pod deletion, and CocoonSet CRD to manage groups of related VM-backed pods with st…

    Go 6 3

Repositories

Showing 10 of 24 repositories
  • sandbox Public

    Fast cold-boot MicroVM sandboxes for AI agents on cocoon

    cocoonstack/sandbox's past year of commit activity
    Go 85 AGPL-3.0 10 16 1 Updated Nov 4, 2026
  • cocoon Public

    Lightweight MicroVM engine built on Cloud Hypervisor. Features include OCI and cloud image support, instant snapshot and clone via reflink, Windows 11 guest support, CNI networking with TC redirect, memory balloon, hugepages, and a Docker-like CLI. Designed for AI sandboxing, cloud desktops, and ephemeral dev environments.

    cocoonstack/cocoon's past year of commit activity
    Go 256 MIT 16 4 0 Updated Nov 4, 2026
  • cloud-hypervisor Public Forked from cloud-hypervisor/cloud-hypervisor

    A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

    cocoonstack/cloud-hypervisor's past year of commit activity
    Rust 1 846 0 0 Updated Nov 4, 2026
  • firecracker Public Forked from firecracker-microvm/firecracker

    Secure and fast microVMs for serverless computing.

    cocoonstack/firecracker's past year of commit activity
    Rust 0 Apache-2.0 2,837 0 0 Updated Nov 4, 2026
  • cocoon-webhook Public

    Kubernetes admission webhook for cocoon workloads: admits VM-backed pods only from the CocoonSet controller, validates CocoonSet and CocoonHibernation specs, and rejects scale-down that would destroy VM state.

    cocoonstack/cocoon-webhook's past year of commit activity
    Go 2 MIT 2 0 0 Updated Nov 3, 2026
  • sandbox-operator Public

    Aggregated Kubernetes apiserver and e2b-compatible data plane for warm-pooled agent sandboxes on microVMs. Sandboxes are served from per-node inventory with no per-sandbox etcd object and claimed from node-local sandboxd warm pools; the e2b SDK reaches them through an edge proxy.

    cocoonstack/sandbox-operator's past year of commit activity
    Go 81 AGPL-3.0 7 0 0 Updated Nov 2, 2026
  • cocoon-macos Public

    macOS VM engine for x86 Linux/KVM, built on cocoon. Boots real macOS guests (Sequoia, Tahoe) via QEMU + OpenCore + OVMF, with ghcr golden images, snapshot & clone, per-VM SMBIOS identity, CNI networking (real LAN IP via TC redirect), reachable VNC, and a Docker-like CLI. For macOS CI runners, cloud Macs, and ephemeral dev environments.

    cocoonstack/cocoon-macos's past year of commit activity
    Go 55 MIT 4 3 0 Updated Nov 2, 2026
  • gateway Public

    Single-binary LLM gateway (gw) in Rust — OpenAI/Anthropic-compatible APIs, multi-provider routing, per-key auth/quotas/rate-limits, failover, streaming, and a billing ledger

    cocoonstack/gateway's past year of commit activity
    Rust 6 AGPL-3.0 0 1 0 Updated Nov 2, 2026
  • cocoon-operator Public

    Kubernetes operator for stateful VM-backed pod workflows. Provides Hibernation CRD to suspend and wake VMs without pod deletion, and CocoonSet CRD to manage groups of related VM-backed pods with stable slot identities. Keeps stateful VM workloads inside native Kubernetes APIs.

    cocoonstack/cocoon-operator's past year of commit activity
    Go 6 MIT 3 1 0 Updated Nov 2, 2026
  • vk-sandbox Public

    Virtual-kubelet provider for sandbox-operator — serves runtime: sandboxd claims from node-local sandboxd hot pools and publishes NodeInventory for the aggregated claim path.

    cocoonstack/vk-sandbox's past year of commit activity
    Go 1 AGPL-3.0 0 1 0 Updated Oct 26, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.