v0.4.2 Firecracker-powered platform

The self-hosted cloud
your infrastructure deserves.

NQRust-MicroVM is a Rust-powered platform for running Firecracker microVMs, isolated Docker containers, and serverless functions — on your own hardware, from a single operator dashboard.

Hardware isolation
Every workload runs inside its own KVM microVM.
One operator surface
VMs, containers, functions, registry, storage.
Stays on your hardware
No tenant. No outbound calls. No vendor lock.
NQ
Virtual Machines
42 running · 3 paused
Create VM
Total VMs
42
Functions
18
Containers
27
Hosts
3
web-prod-014 vCPU8 GB10.0.0.12
pg-cluster-018 vCPU16 GB10.0.0.21
analytics-worker2 vCPU4 GB10.0.0.34
staging-redis2 vCPU4 GB10.0.0.45
build-runner-038 vCPU12 GB10.0.0.51
Cluster status
42 VMs healthy
Snapshot complete
web-prod-04 restored to v2.3.1
Nexus Quantum Technologies delivers a vertically integrated, Rust-powered cloud platform built for the Agentic AI era. — Nexus Quantum Rust
Rust 1.85+ · Next.js 15 Self-hosted Commercial license
Platform Capabilities

One operator console. Every workload.

VMs, containers, and serverless functions — managed from a single Next.js dashboard, backed by three lightweight Rust services. Built for platform engineers who would rather own their stack than rent it.

Firecracker microVMs

Isolated Linux VMs with their own kernel, rootfs, CPU and memory limits. Templates and full snapshots make re-deployment a single click.

web-prod-014 vCPU · 8 GB
pg-cluster-018 vCPU · 16 GB
staging-redis2 vCPU · 4 GB

Docker — inside a VM

Run any Docker workload with full API compatibility, with a Firecracker kernel underneath every container. Container escape is structurally impossible.

# pull and run, hardware-isolated
$ nqr ct run nginx:1.25 --port 80
✓ vm-c8a2f0 booted · container nginx-prod attached

Serverless functions

Node.js, Python, Ruby. Monaco editor, live execution logs, an interactive playground.

Web terminal — no SSH client needed

Full xterm.js shell streamed over WebSocket. Tab into any VM straight from the browser.

root@web-prod-01:~# systemctl status nginx
● nginx.service — A high performance web server
Loaded: loaded (/lib/systemd/system/nginx.service; enabled)
Active: active (running) since Thu 2026-05-22 09:14:02 UTC

Snapshots & templates

Full and differential snapshots with instant restore. Save any VM as a re-deployable template.

Image registry

Kernels, rootfs, and Docker images — import from URL, local path, or DockerHub.

Flexible networking

NAT, isolated, bridged, and VXLAN overlay tunnels. Port-forward in two clicks.

NATDefault — internet via host
BridgedVMs live on your LAN
VXLANMulti-host overlay

Live metrics, straight from the guest

A tiny guest agent auto-deployed inside every VM reports CPU, memory, network and disk over WebSocket. Watch your fleet breathe in real time.

Role-based access control

Admin, User, Viewer roles with per-resource ownership and per-user preferences. Hand out the dashboard without handing out root.

Pluggable storage

Mix local file, NFS, SMB, iSCSI+LVM, TrueNAS REST, and SPDK vhost-user. Add or remove backends from the UI without restarting the manager.

Operator Dashboard

One dashboard for your entire fleet.

Every operation in the API is in the UI. VMs, containers, functions, registry, networking, storage backends, hosts, users — all here, all real-time.

nqrust.internal/vms
AB

Virtual Machines

Provision, monitor, and snapshot Firecracker microVMs across your hosts.

Create VM
Quick create
APIManagerRust · AxumDBWeb UIAgent
Total VMs
42
↑ 6 this week
Running
38
90.5% uptime
vCPU allocated
184
of 256 available
Storage used
2.4 TB
across 3 backends
Name
Status
CPU
Memory
IP
web-prod-01tag: production
Running
4 vCPU
8 GB
10.0.0.12
pg-cluster-01tag: database
Running
8 vCPU
16 GB
10.0.0.21
analytics-workertag: jobs
Running
2 vCPU
4 GB
10.0.0.34
staging-redistag: cache
Paused
2 vCPU
4 GB
10.0.0.45
build-runner-03tag: ci
Running
8 vCPU
12 GB
10.0.0.51
Architecture

Four lightweight pieces. Nothing else.

Three Rust services and a Next.js frontend coordinate everything. No Kubernetes control plane. No external scheduler. No mystery sidecars.

Web UI
Next.js 15 / React 19 dashboard — terminal, metrics, full management
:3000
Manager
Central Rust API — VM lifecycle, registry, networking, RBAC
:18080
Host Agent
Runs on each KVM host, drives Firecracker via Unix sockets
:9090
Guest Agent
Tiny static binary auto-deployed inside every VM, reports metrics + IP
:9000
BrowserWeb UINext.js 15Manager APIRust · AxumPostgreSQLstateKVM HOSTHost AgentRustmicroVMweb-prod-01microVMpg-cluster-01microVManalyticsHTTPSREST · WSSQLRESTUnix sockets
Pluggable Storage

Bring any backend. Swap them live.

Mix local file, NFS auto-mount, SMB/CIFS, vendor-agnostic iSCSI+LVM, TrueNAS, or SPDK vhost-user. Add or remove backends from the UI — no manager restart.

local_file

Local file

Files under /srv/fc/vms/. Zero dependencies — single-host and dev.

nfs

NFS

Manager delegates mount.nfs to the agent. One file per VM under the share.

smb

SMB / CIFS

Mount any Windows file server or NAS share via the agent.

iscsi_lvm

iSCSI + LVM

One LUN per target → LVM VG → per-VM lvcreate. Vendor-agnostic.

truenas_iscsi

TrueNAS

REST creates per-VM zvol + extent + target. ZFS snapshots, thin provisioning.

spdk_lvol

SPDK vhost-user

NVMe direct, high-throughput single-host. Future clustering primitive.

iscsi

iSCSI (passthrough)

Pre-cut LUN, one VM per LUN. Legacy passthrough.

+

More on the roadmap

Ceph RBD and S3-backed block are next. Tell us what you need.

Built For

When containers aren't isolated enough.

Three flavors of team consistently choose microVMs over plain containers — usually because their workload model demands a kernel boundary.

01

Untrusted code execution

Run customer code, sandboxed builds, or LLM-generated programs inside a VM that can't reach the host.

  • Per-job VM, snapshot-restore in seconds
  • Network policy per workload
  • Resource caps that actually hold
02

Agentic AI workloads

Give an LLM agent a real Linux machine — a shell, a filesystem, a network — without giving it your host.

  • Spin up disposable environments
  • Full Docker API for tool use
  • Browser terminal for human-in-the-loop
03

On-prem multi-tenant platforms

Hand internal teams self-service VMs with strict isolation, RBAC, and pluggable storage that maps to your existing SAN.

  • Admin / User / Viewer roles
  • Per-resource ownership
  • Bring your own iSCSI / TrueNAS
Pricing

Commercial licensing,
tailored to your fleet.

NQRust-MicroVM is a commercial product. Pricing depends on host count, supported storage backends, and your support requirements — tell us about your fleet and we'll send a tailored quote.

  • Self-hosted on your own KVM hardware — nothing leaves your network
  • Every platform capability — VMs, containers, functions, registry
  • All storage backends, multi-host clustering, RBAC
  • Onboarding, named support, airgapped install on request
Quotes returned within 48 hours · NDA + technical evaluation available on request
Commercial license
NQRust-MicroVM
Contact us Per-host annual license · volume tiers available
What's included
  • Unlimited VMs, containers, and functions per host
  • Every storage backend, including iSCSI + LVM and TrueNAS
  • VXLAN multi-host clustering & port forwarding
  • SSO via SAML / OIDC, RBAC, audit logs
  • Guided onboarding and migration assistance
  • Production support with response-time SLAs
Contact sales
FAQ

Questions, asked.

Docker shares a kernel between containers. NQRust-MicroVM runs each workload (whether a VM or a Docker container) inside its own Firecracker microVM with its own kernel, CPU, and memory boundary. Container-escape style attacks are structurally impossible, and noisy-neighbor effects largely disappear.

No. The Manager, Agent, and Guest Agent are written in Rust because it lets us ship a small, fast, statically-linked binary — but operators interact with the Next.js dashboard and the REST API. You can run the entire platform without touching the source.

Any x86_64 Linux box with KVM (Intel VT-x or AMD-V), 4 GB RAM minimum, 20 GB free disk. Ubuntu 22.04 / 24.04 LTS and Debian 11 are the supported distros today. Multi-host clusters add agents to a shared manager.

We ship a single Rust TUI installer (nqr-installer) that walks through KVM checks, networking, PostgreSQL, and systemd services. There's a one-command online flow and a fully-airgapped flow for sites without internet egress.

Yes. The storage layer is pluggable — add a backend from the UI without restarting the manager. Local file, NFS, SMB, iSCSI+LVM, and TrueNAS REST are visible by default; SPDK vhost-user and generic iSCSI passthrough sit behind an advanced disclosure.

Support tiers and SLAs are scoped during onboarding based on your fleet size and workload criticality. Every commercial license includes a dedicated Slack channel and a response-time SLA — we're happy to share our internal runbooks and example incident postmortems on request.

Yes — the Rust TUI installer ships an offline mode that takes a single transferable binary and provisions everything (KVM, networking, PostgreSQL, systemd) without outbound internet access. Suitable for regulated environments and sites without egress.

Ready to host your own cloud?

Tell us about your fleet — host count, workloads, storage backends. We'll come back with a quote and a guided install in 48 hours.

Already running NQRust internally? Get in touch about a commercial license →