Stateful micro-VMs for AI agents that refuse to start from scratch

What it does

BoxLite is a Rust runtime that spins up lightweight virtual machines—called Boxes—and runs standard OCI containers inside them. Each Box acts as a persistent workspace, retaining files, installed packages, and environment state across restarts instead of wiping clean after every run. It embeds into your code as a library with no background daemon or root required, and is built to run locally on a laptop before scaling out.

The interesting bit

The unusual trick is nesting: it wraps familiar Docker images inside real micro-VMs using KVM or Apple’s Hypervisor.framework, giving each Box its own kernel and hardware isolation. It then adds OS-level sandboxing—seccomp on Linux, sandbox-exec on macOS—creating a security stack more commonly found in browsers than infrastructure tools.

Key highlights

• Stateful persistence: files, packages, and disk state survive across stop and restart.
• True hardware isolation via KVM or Hypervisor.framework; each Box runs its own kernel, not just namespaces.
• Embeddable, async-first library with no daemon and no root; runs fully offline on macOS or Linux.
• Standard OCI image support with pull and caching; use existing Docker images without modification.
• Multi-language SDKs (Rust, Python, Node.js, Go, C) and a built-in REST API for broader integration.

Caveats

• macOS Intel support is listed as coming soon; currently Apple Silicon, Linux x86_64/ARM64, and Windows WSL2 only.
• Linux and WSL2 hosts need KVM access (/dev/kvm), which rules out environments without nested virtualization.

Verdict

Grab it if you need long-lived, kernel-isolated execution environments for agentic workflows. Pass if you are on Intel macOS or just need a simple container runner without VM overhead.