oracle free tier seems to be 1GB RAM.

why dont you run the VM on your machine?

Yes that works too.

But this way I can open the firewall, npm run dev and send the link of my new vibe coded security vulnerability/app to my friends without my computer running.

Plus a VM for this, a container for that and soon my 32GB memory isn't enough. I offload aggressively.