github.com/firecracker-microvm/firecracker

Enable Firecracker logging and metrics (named pipes, FlushMetrics) and set up guest-host communication over vsock

Set up tap-device networking for a Firecracker microVM (host tap, NAT, guest IP via API or kernel boot args)

Tune Firecracker machine configuration: vCPU count, memory size, SMT, dirty-page tracking, and huge pages

Boot a Firecracker microVM from scratch via its API socket (kernel, rootfs, InstanceStart)

Configure a virtio memory balloon device on a Firecracker microVM pre-boot, inflate/deflate it post-boot, and poll balloon statistics for guest memory pressure

Handle vsock connection resets and network IP/TAP-name conflicts when snapshotting and restoring/cloning Firecracker microVMs

Enable dirty-page tracking, take chained diff snapshots of a Firecracker microVM, merge the layers with snapshot-editor, and restore the merged result

Create a full snapshot of a running Firecracker microVM (pause, snapshot state+memory to files) and restore that exact state in a fresh Firecracker process

Customize or disable Firecracker's seccomp filters: default per-thread filters, custom filters compiled with seccompiler-bin, and --no-seccomp

Configure cgroups (v1 or v2) for a jailed Firecracker microVM, including NUMA/CPU pinning via cpuset

Daemonize the jailer so Firecracker runs in the background, and reliably find/kill the Firecracker process afterwards

Run a Firecracker microVM under the jailer binary with chroot isolation, an unprivileged uid/gid, and optional network-namespace joining