rustvmalpha

Docker, running inside your browser tab.

A real arm64 Linux machine, compiled to WebAssembly, boots containerd and dockerd right here. Start an app with one click, pull any image, open a shell — nothing to install.

Start an app: its containers start in the machine, the terminal shows what runs, and Open appears once it answers.

A toolbox: an Alpine container that stays running, with tools installed into it on demand. docker exec -it toolbox sh is your workbench.

Claude Code

Anthropic's coding agent, in a container (node:22-slim; installed once into the claude-home volume). It asks you to log in: open the link it prints (click it), then paste the code (Paste above the terminal, or Ctrl-V). The login stays in this browser's machine, and its traffic to Anthropic is TLS from inside the machine: this site's relay only forwards the encrypted bytes.

Clone a Git repository into the toolbox

Ask a web address

Take files out of a container (and put them in). Downloads come straight from Docker's API in this tab, as tar archives.

Container Path in the container

Images download from the Images tab (docker save).

Or click the terminal and type: it is a real shell (sh) on the machine, with docker, wget, nc and busybox's tools.

booting

This browser can't run the machine yet

rustvm runs a whole Linux machine inside the page, which needs a few things only some browsers have today:

It works today in Chrome or Edge 133+ on a desktop or laptop with 8 GB of memory or more.

What is this?

A real machine, not a mock

An AArch64 (or x86-64) emulator written in Rust and compiled to WebAssembly translates Linux programs as they run. The containerd, dockerd and runc you're talking to are the stock builds.

It stays in your browser

Images, containers and Docker's state are kept in this site's private browser storage (OPFS), so a second visit boots in seconds with everything still there. Reset state clears it.

Pulls through a shared cache

Images come from Docker Hub (and ghcr.io, quay.io …) via this server's read-only registry cache. Containers can reach the public internet on common web ports, within fair-use limits.

Alpha limits

Chrome or Edge 133+ on a desktop or laptop. Firefox and Safari are untested; iPhone and iPad can't run it yet.
The machine runs images of its own architecture: linux/arm64, or linux/amd64 with the amd64 switch.
Everything runs on an emulated CPU: small images take seconds, images of hundreds of MB take minutes.
Outbound network is limited to web ports (80, 443, …) and DNS, with per-visitor rate and volume caps. No mail, no inbound connections.

Machine log

Docker, running inside your browser tab.

Containers

One container

Clean up

Pull and try any image

Images in this machine