Hardware-isolated microVMs, in TypeScript
Bake disposable
VM snapshots.
Boot in 100 ms.
A small TypeScript library on top of the official microsandbox SDK. Bake an OCI image plus your setup steps into a snapshot; boot fresh, isolated microVMs from it on demand.
$ npm install github:beamhop/lightbox
build-and-run.ts
import { buildSnapshot, runInSandbox } from "@beamhop/lightbox";
// Bake a snapshot once. Idempotent — safe to re-run.
await buildSnapshot({
name: "py-data",
image: "python:3.12",
setup: ["pip install --no-cache-dir pandas"],
});
// Launch, run, tear down. Boots in ~100 ms.
const out = await runInSandbox(
{ snapshot: "py-data", name: "analysis-1" },
(sb) => sb.shell("python -c 'import pandas; print(pandas.__version__)'"),
);
console.log(out.stdout()); ⚡
Boots in 100 ms
Snapshots pre-populate the upper layer. No image rebuild, no per-launch install cost.
🔒
Hardware-isolated
Each sandbox is a real microVM with its own Linux kernel — designed for untrusted code.
📦
TypeScript-first
Declarative SnapshotConfig with full IntelliSense. Install from npm or directly from git.
vs. containers
| Containers | lightbox snapshots | |
|---|---|---|
| Isolation | shared kernel | hardware-isolated microVM |
| Boot time | ~1 s | < 100 ms |
| Image format | OCI | OCI + per-snapshot diff |
| Run untrusted code | risky | designed for it |
| Pre-bake heavy installs | rebuild image | snapshot once, boot fresh forever |
Ready to try it?
Install from GitHub and bake your first snapshot in 90 seconds.