Google Described Its Agent Sandbox. I Built One with Firecracker and Measured It

Automated excerpt

Sixty-four idle forks of a 512 MiB VM cost about 3 MiB of host memory each. Firecracker maps the memory file MAP_PRIVATE, so pages load on demand and guest writes become private anonymous memory (docs). vsock_override on snapshot load. If every VM’s memory is a MAP_PRIVATE mapping of the same snapshot file, a page that no guest writes exists once, in the host page cache.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.