This is great. Wish this was around when I started working on vibebin ( https://...

jingkai_he · 2026-02-08T20:36:54 1770583014

Creator of matchlock here. You can directly use Docker/OCI compatible images (e.g. ubuntu:24.04) as the rootfs with the `--image` flag.

You can also build image with `matchlock build -f Dockerfile -t foo:bar .` - Under the hood it builds the image using buildkit inside the microvm.

indigodaddy · 2026-02-08T21:46:06 1770587166

Any chance you could look into potentially adding the option to use PVM (eg so a PVM mode instead of KVM) in your matchlock/firecracker implementation?

See https://blog.alexellis.io/how-to-run-firecracker-without-kvm...

indigodaddy · 2026-02-08T21:28:14 1770586094

Thanks for the response! How would matchlock microvms perform on a KVM VM without CPU passthrough, or is it not possible?

jingkai_he · 2026-02-09T10:15:29 1770632129

I'm predominantly using Linux vm workstation with nested virt enabled. It performs reasonably well with nested virtualisation.

I haven't tested the scenario of non-cpu-accelerated workload, but I'd expect the performance to be very poor.

That said it might be possible with PVM as the above thread has mentioned.