Run any code.
Nothing leaves the box.
Every run gets its own microVM: separate kernel, no network, read-only disk, up in ~260 ms and destroyed at the end. When you need more, a persistent machine with per-host filtered networking.
Where to start
CLI
rc run, machine, image and serve: the ephemeral job and the persistent machine, from the terminal.
runner.code
The machine declared in a TOML file: image, resources, env, init and workload.
Network and volumes
Starts with no network and nothing from the host. Egress to allowed hosts, published ports and mounted directories.
Credentials
Tokens the code uses but cannot read: the real value never enters the VM.
Pack
A whole machine in one portable executable that runs on another host with no pull and no build.
API
rc serve: HTTP endpoints, job and response format, errors and limits.
SDKs
Go and Python clients, standard library only, for jobs and machines.
Examples and guides↗
Ready-to-run projects (apps, headless browser, local LLM, SDKs) and step-by-step guides.
Agents
A short, complete reference for whoever runs rc, human or AI agent.
Build, create the image and run
$ task krun:install && task build$ task image:build -- --stack python$ ./bin/rc run --stack python --code 'print(2**10)'1024