Fast, lightweight, secure. A unikernel engine for building, running, and orchestrating VM‑based application images.
One binary builds your app into a single‑purpose machine image. No OS, no container, no shared kernel — just your code and the metal underneath it.
Drivers for Go, Node, Python, Rust and raw static binaries. Point jerboa at a source project and get a bootable image back.
Native VM execution on QEMU and Firecracker microVMs. Linux runs a native daemon; Windows runs through a dedicated WSL2 distro.
Managed bridge networks with TAP-backed guests, internal DNS, volumes, compose stacks and replicated services.
Daemon-side metrics, traces, stats and a built-in dashboard. See what every guest is doing without bolting on an agent.
A unikernel compiles your application and just the OS functions it actually calls into one image. Less to ship, less to boot, less to attack.
No user/kernel context switches. Your code is the kernel; syscalls become function calls.
No init system, no service tree. The image is a process — it starts at the speed of a fork.
No shell, no package manager, no unused services. There is nothing inside the image to pivot to.
Installation, building images, running guests, networking, volumes, services, compose and the full CLI reference — with copy-ready command examples.