MicroVM platform for AI sandboxing, cloud desktops, and ephemeral dev environments. Built on Cloud Hypervisor / Firecracker and Kubernetes.
Documentation: cocoonstack.github.io
| Repository | Description | Docs |
|---|---|---|
| cocoon | Lightweight MicroVM engine — OCI/cloud images, instant snapshot & clone, Windows 11 support, CNI networking, Docker-like CLI | docs |
| cocoon-agent | In-VM exec agent — vsock command channel behind cocoon vm exec / logs and per-clone identity reseed, no SSH |
docs |
| cocoon-macos | macOS guests via QEMU + OpenCore + OVMF, reusing cocoon's cloudimg store and clone/snapshot model | docs |
| cloud-hypervisor | Patched Cloud Hypervisor fork — DISCARD fix, virtio-net ctrl_queue tolerance, upstream cherry-picks | — |
| rust-hypervisor-firmware | Patched UEFI firmware — ACPI ResetSystem fix for Windows graceful shutdown | — |
| windows | Windows 11 25H2 image factory — unattended QEMU build, Cloud Hypervisor validation (DHCP, RDP, SAC, ACPI shutdown), published to GHCR as OCI artifacts | — |
| Repository | Description | Docs |
|---|---|---|
| vk-cocoon | Virtual Kubelet provider — maps pod lifecycle to VM operations (run, clone, snapshot, hibernate) | docs |
| cocoon-operator | Kubernetes operator — CocoonSet and CocoonHibernation CRDs for stateful VM workflows | docs |
| cocoon-webhook | Admission webhook — sticky scheduling plus CocoonSet and CocoonHibernation validation | docs |
| cocoon-net | VPC-native networking — embedded DHCP plus alias IPs (GKE) or ENI secondary IPs (Volcengine) for direct VM DHCP | docs |
| cocoon-common | Shared Go library — CRD types, annotation contract, Kubernetes helpers, OCI registry + snapshot packages | — |
| Repository | Description | Docs |
|---|---|---|
| gateway | Single-binary LLM gateway (gw) in Rust — OpenAI/Anthropic-compatible APIs, multi-provider routing, per-key auth / quotas / rate-limits, failover, billing ledger |
docs |
| Repository | Description | Docs |
|---|---|---|
| sandbox | Fast cold-boot AI-agent sandbox on cocoon — warm pools, in-guest daemon, per-node control plane, Go SDK | docs |