Hacker News Reader

The cited startup time is better than Firecracker but it's not a better tool than Firecracker (for a start only claims to be a PoC, "contains only the necessary parts for realistic benchmarking"). Looks like it's based on RISC-V emulation so the approach seems unlikely to get performance comparable to Firecracker.

You might look into gVisor if you're running containerized workloads on a host without virt support (such as a vm without nested virtualization support).

Absolutely not! It's better to use something backed by KVM, so that you can use all the features of the CPU. This is just a proof-of-concept that was fun to make.

You could also use gVisor which doesn't need nested virtualization.