A microVM Small Enough to Read

A microVM Small Enough to Read

Modern sandboxing arranges itself, if one steps back a few paces, on a rough spectrum. At one end sits the container, a …

Date 2026-04-23
Words 3671
Read 18 min
Power A
Speed D
Range C
Durability E
Precision E
Potential D
Running What One Did Not Write

Running What One Did Not Write

The shell one-liner, which twenty years ago required a trip to Usenet and the confidence of a stranger, is now produced …

Date 2026-04-21
Words 2843
Read 14 min
Power B
Speed D
Range C
Durability E
Precision E
Potential D
A Tour of the gVisor Front

A Tour of the gVisor Front

1 One of the minor peculiarities of writing about systems software in the present era is the Tour of the Sandbox. One …

Date 2026-04-19
Words 2226
Read 11 min
Power B
Speed C
Range C
Durability E
Precision E
Potential D
Vermillion

Vermillion

Red of Titian, red of blood and throne mercury sulfide crushed from cinnabar stone prisoners in Almadén, digging their …

Date 2026-03-28
Words 269
Read 2 min
Power E
Speed A
Range E
Durability E
Precision E
Potential D
  1. ARCHITECTURE

    Greek Revival - Reading the American House

    Some weeks back, on a back road in southern Vermont — one of those roads that loses the centre of any town it passes through, and re-emerges into pasture before …

    3256 words · 16 min
  2. GO

    A microVM Small Enough to Read

    Modern sandboxing arranges itself, if one steps back a few paces, on a rough spectrum. At one end sits the container, a cleverly fenced process that remains, …

    3671 words · 18 min
  3. GO

    Running What One Did Not Write

    The shell one-liner, which twenty years ago required a trip to Usenet and the confidence of a stranger, is now produced by a language model the moment one asks …

    2843 words · 14 min
  4. ARCHITECTURE

    Queen Anne - Reading the American House

    A few weeks ago I found myself walking a residential block in a town I was passing through — one of those New England riverside towns where the 1880s left the …

    2199 words · 11 min
  5. TECHNICAL

    The Sections One Did Not Ask For

    A compiler, asked to produce an object file from three lines of assembly, will produce a good deal more besides. It will emit debug sections describing the …

    2310 words · 11 min
  6. GO

    A Tour of the gVisor Front

    1 One of the minor peculiarities of writing about systems software in the present era is the Tour of the Sandbox. One reads a paper, reads some source, builds a …

    2226 words · 11 min
  7. GO

    Hijacking Signals in Go - Notes from a Tiny gVisor

    A few days ago I began writing a toy version of gVisor — Google’s userspace kernel — as a way of discovering, in the only way one truly discovers such …

    2567 words · 13 min
  8. GO

    mini-sentry - Building a Userspace Kernel in Go

    There is a particular kind of understanding that only comes from building a thing yourself — not reading about it, not studying the source, but sitting down …

    2045 words · 10 min
  9. WRITING

    The Signal and the Silence

    I set down this account not because I expect to be believed, but because the alternative — to carry it alone — has become a weight I can no longer bear. The man …

    6111 words · 29 min
  10. Vermillion

    Red of Titian, red of blood and throne mercury sulfide crushed from cinnabar stone prisoners in Almadén, digging their own grave so that a Cardinal’s robe …

    269 words · 2 min