OmniRun
Self-hosted alternative to E2B using Firecracker microVMs. Boot a sandboxed Linux environment in under 150ms, run untrusted code safely, tear it down when done. E2B-compatible API means existing tools work out of the box. Includes a CLI and TypeScript SDK as separate packages.
Retrospective
The Good
Firecracker boots a microVM in under 150ms. The E2B-compatible API means existing tooling just works. Having a CLI and SDK as separate packages from day one keeps things clean.
The Bad
Firecracker requires KVM, which means bare metal or nested virt. That rules out most cloud providers for development. Testing locally on macOS requires a Linux VM to run the Linux VM. It's VMs all the way down.
The Ugly
Networking between the host and the microVM was a multi-day rabbit hole involving tap devices, iptables, and bridge interfaces. The docs assume you already know Linux networking at a kernel level.