Show HN: Tiny VM sandbox in C with apps in Rust, C and Zig

(github.com)

182 points | by trj 23 hours ago

6 comments

  • psanchez 9 hours ago
    I just had a look at the code and it is indeed very compact. I haven't compiled or used it.

    Looks like RISC-V 32-bit integer and multiply and atomic instr extension. Floating point supported when compiling via gcc or similar the example apps (not by the emulator itself but by the compiler emiting the required software functions to emulate the floating point operations instead).

    I think it is very clever. Very compact instruction set, with the advantage of being supported by several compilers.

    Wrapper over this other project which is the one implementing the instruction set itself: https://github.com/cnlohr/mini-rv32ima

    Kudos to both projects.

  • idle_zealot 21 hours ago
    I suppose this is in the same realm as what some people are trying to do with WASM, creating a common execution environment? This is built on RISC-V instead though. I wish I knew more about the limitations/capabilities of each approach, but in any case a future where applications are built for a common VM seems like something we've been building to for a while, the modern web being the closest we've come.
    • apitman 17 hours ago
      I did a brief comparison a while back, specifically WASM vs libriscv for. I decided to go with WASM, primarily because it was much more closely designed for this sort of thing, and it works in browsers. libriscv is really cool and impressive though.

      EDIT: Found this link in my notes as well: https://news.ycombinator.com/item?id=24900376

      • trj 14 hours ago
        libriscv looks amazing but its's much larger. It says "Less than 40kB total memory usage". My first version (unpublished) of uvm32 was called uvm80 and emulated a Zilog Z80 CPU. My aim is to have a safe, embeddable sandbox for any device, rather than the best performance.
    • IshKebab 20 hours ago
      See https://opensource.googleblog.com/2025/11/secure-by-design-f...

      This looks like it has a smaller code footprint at least. I'm not sure RISC-V is a very good target for this sort of thing. E.g. decoding the immediates in software is going to be very slow, whereas in hardware it's fast.

      But on the other hand it is a stable target and can be configured to be a lot simpler than WASM.

  • snops 11 hours ago
    Really neat clean code!

    I like the single C file, but Docker if you want all the examples approach, that's really convenient for embedded.

    Test coverage looks good as well, be interesting to see the metrics.

    This would be quite cool for adding scripting to medical devices, avoiding the need to revalidate the "core" each time you change a feature.

    An interesting comparison would be against an embedded WASM bytecode interpreter like https://github.com/bytecodealliance/wasm-micro-runtime, which is still much larger at 56.3K on a Cortex M4F. Maybe WASM is just a more complicated instruction set than the smallest RISCV profile?

  • rokoss21 8 hours ago
    Interesting timing - been looking for exactly this for embedded firmware testing. Most alternatives are either too heavy (full emulation) or too fragile (custom interpreters).

    Have you considered adding support for memory-mapped IO simulation? That would make it useful for testing IoT/microcontroller drivers without the actual hardware.

  • trj 21 hours ago
  • bdjjwjd 12 hours ago
    [flagged]
    • reactordev 12 hours ago
      They went off a tip sent in via email. They probably click those phishing links too. Not the brightest of folks hunting for criminals.

      (and yet they still catch some, which is telling of the criminal). Fact is this happens all the time in the USA. It’s why I don’t stream any development of games or tech despite me creating.