On October 22 Google described Agent Compute Engine: every AI agent session gets its own microVM, which is checkpointed while the model thinks, cloned copy-on-write from warm snapshots, and given no network card. You can’t use it yet, and the post has no latency or density numbers. So I built the same pattern on Firecracker in about 2,200 lines of Go and measured it on two machines. Sixty-four idle forks of a 512 MiB VM cost about 3 MiB of host memory each. On bare metal, a snapshot restore answers in 25 ms, 26 times faster than a cold boot, and 64 forks started at once are all ready in about 150 ms. On a Mac mini under nested virtualization, twelve forks started at once never became ready at all, and that failure taught me the most.
Google Described Its Agent Sandbox. I Built One with Firecracker and Measured It
A Go rebuild of Google's Agent Compute Engine pattern on Firecracker: copy-on-write snapshot forks, idle-aware hibernation and a NIC-less guest with a credential-injecting proxy, measured on bare metal and under nested virtualization.
Key takeaways
A developer built an AI agent sandbox using Firecracker, measuring low memory usage and fast startup times, while Google described a similar system without providing specific metrics.
- Developer created a sandbox with Firecracker, using 3 MiB of host memory per VM.
- Google's Agent Compute Engine uses isolated microVMs but lacks published performance data.
- Testing showed fast snapshot restores and challenges with nested virtualization.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
Story details
- Published
- By
- attilathehoon
- Section
- posts
- Format
- Article
- Original
- antonau.tech ↗
Related reporting
4 stories on this topic from 3 sources, oldest first.
- Lowyat.NET Google Pixel 11 Pro Review: Absentee Agent
- Paul Tan's Automotive News Proton cars to get Google built-in from second half of 2027, along with all Geely Group brand vehicles
- Hacker News Google Described Its Agent Sandbox. I Built One with Firecracker and Measured It (this story)




