This is great. Wish this was around when I started working on vibebin ( https://github.com/jgbrwn/vibebin ), probably would have leveraged matchlock instead of Incus/LXC. I guess I could fork/branch and give it a go! Although for vibebin use case I actually need them to not be ephemeral. Edit, ooooh i see `--rm=false` nice

Where do the images come from? What are our options around that and also using custom images etc?

▲

jingkai_he 4 hours ago | parent [-]

Creator of matchlock here. You can directly use Docker/OCI compatible images (e.g. ubuntu:24.04) as the rootfs with the `--image` flag.

You can also build image with `matchlock build -f Dockerfile -t foo:bar .` - Under the hood it builds the image using buildkit inside the microvm.

	▲	indigodaddy 2 hours ago \| parent \| next [-]
		Any chance you could look into potentially adding the option to use PVM (eg so a PVM mode instead of KVM) in your matchlock/firecracker implementation? See https://blog.alexellis.io/how-to-run-firecracker-without-kvm...
	▲	indigodaddy 3 hours ago \| parent \| prev [-]
		Thanks for the response! How would matchlock microvms perform on a KVM VM without CPU passthrough, or is it not possible?