QEMU
Open-source machine emulator and virtualizer for running VMs and emulating other CPU architectures.
HN commenters recommend QEMU for isolated sandbox VMs, especially for running AI coding agents with full permissions,1234 and for emulating other CPU architectures such as RISC-V, MIPS and x86.567 Complaints are scattered rather than common: on macOS one user found Colima with Apple's virtualization framework faster and less buggy,8 and another hit a qemu-user bug that breaks uv for cross-platform targets.9
Why people recommend it
Agent sandboxing · 3
A full VM gives AI agents and untrusted code a stronger boundary than shared-kernel sandboxes or Docker.
“QEMU virtual machines. Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root.”
“Highly recommend qemu instead.”
Show 1 more
“Originally I used docker, but I’m now in the process of jettisoning that, and switching to qemu.”
Architecture emulation · 3
Emulates RISC-V, MIPS, Intel Mac OS X and other targets for testing and cross-architecture workloads.
“Qemu also supports 32bit and 64bit RISC-V”
“Once I used an old MIPS debian in qemu to test big endian.”
Show 1 more
“You can emulate Intel Mac OS X using QEMU on linux machines”
qcow2 snapshots · 2
The copy-on-write qcow2 disk format makes forking, snapshotting and restoring VMs cheap.
“We use QEMU for our sandbox infra.”
“QEMU virtual machines. Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root.”
Quick to spin up · 2
Simple VMs start quickly, which makes one VM per project practical.
“A simple qemu virtual machine is nice and quick to spin up.”
“running the `qemu-system-x86_64` command (takes a couple of seconds)”
Extensibility · 3
TCG plugins, the microvm machine type and fault simulation support custom tooling and testing.
“QEMU now has the notion of TCG plugins[1] that can read/write registers and memory, which is enough for most cases.”
“uses QEMU's microvm machine type under the hood”
Show 1 more
“all of these are simulateable in QEMU or Linux (tc netem / blkdebug)”
GPU passthrough · 2
Users pass whole GPUs and USB controllers through to VMs.
“I have a few QEMU VMs where I use PCI-passthrough of a whole GPU and a USB controller”
“You can emulate Intel Mac OS X using QEMU on linux machines”
Caveats and dissent
macOS performance · 1
One user found Colima with Apple's virtualization framework performed better and avoided bugs they hit with QEMU.
“found it works better than QEMU (better performance and resolved some bugs I was running into with the Supabase docker stack)”
qemu-user bug · 1
A qemu-user bug breaks uv for cross-platform targets, forcing a fallback to Lima.
podman's been great for me on macOS for testing stuff quick; which earlier used to need a whole limactl[3]/virt thing. you can set it up with qemu-user-static for --platform linux/amd64; i don't remember which i exactly used, or if official docs have been updated for it but looked something like [1] there is one sneaky bug in qemu that breaks uv [2] for cross-platform targets so i keep having to fall back to lima for
Hardware differences · 1
QEMU does not check segmentation limits the way real hardware does.
“qemu doesn't check segmentation limits but real hardware does.”
No GPU on Mac · 1
Linux VMs on macOS do not get access to the real GPU, which limits model performance.
“some free and open source (QEMU, UTM, Lima, Colima)”
Slower startup · 1
A VM-based browser starts slower than a native instance.
“I use qemu + cage + firefox and some glue logic to fire up a copy of a base image which gets deleted on exit.”
Often compared with
Who recommends it in their own words
From the makers not counted in the ranking
“My team is looking to hire a ~entry-level software developer to help us design and extend QEMU support [1] for the Hexagon DSP”
“Having ability to spin up virtual machines speeds up development quite a bit.”
“QEMU switched to a data driven representation with a python program to autogenerate the "check bit patterns and extract fields" code, and it's one of the better design overhauls we've done”
Threads where it came up
- AI isn't replacing SREs, it's deskilling them 1 mention
- Backdoor in Claude Code for VS Code extension on the Cursor Marketplace 1 mention
- Running Windows desktop tests from Linux with disposable VMs 1 mention
- Ask HN: Who is hiring? (October 2026) 1 mention
- Pentium II at 600Mhz with Voodoo 3 Emulated on 86Box with M6 Mac Mini 1 mention
- Software sandboxing: The basics (2025) 1 mention
Data: qemu.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 30
“all of these are simulateable in QEMU or Linux (tc netem / blkdebug)”
“I only use agentic development tools in qemu VM that has no production”
“novel approaches to document creation with new workflows using QEMU in Linux”
“I would be interested to see a performance comparison with qemu and softgpu”
“Highly recommend qemu instead.”
“I have a few QEMU VMs where I use PCI-passthrough of a whole GPU and a USB controller”
“Qemu also supports 32bit and 64bit RISC-V”
“You can emulate Intel Mac OS X using QEMU on linux machines”
“some free and open source (QEMU, UTM, Lima, Colima)”
“QEMU virtual machines. Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root.”
“uses QEMU's microvm machine type under the hood”
“coding my own QEMU VM orchestration solution was among the first things I used it for”
“A simple qemu virtual machine is nice and quick to spin up.”
“It would make sense to implement it in QEMU instead.”
“running the `qemu-system-x86_64` command (takes a couple of seconds)”
podman's been great for me on macOS for testing stuff quick; which earlier used to need a whole limactl[3]/virt thing. you can set it up with qemu-user-static for --platform linux/amd64; i don't remember which i exactly used, or if official docs have been updated for it but looked something like [1] there is one sneaky bug in qemu that breaks uv [2] for cross-platform targets so i keep having to fall back to lima for
“I used QEMU during development.”
“QEMU now has the notion of TCG plugins[1] that can read/write registers and memory, which is enough for most cases.”
“found it works better than QEMU (better performance and resolved some bugs I was running into with the Supabase docker stack)”
“We use QEMU for our sandbox infra.”
“qemu doesn't check segmentation limits but real hardware does.”
“Claude Code helped me with things like the QEMU invocation”
“I use either QEMU VMs or my own sandbox-run [0]”
“Originally I used docker, but I’m now in the process of jettisoning that, and switching to qemu.”
“I'm currently using a qemu vm for the codex”
“creator of QuickJS, QEMU, FFMPEG and many other brilliant and fascinating tools!”
“Once I used an old MIPS debian in qemu to test big endian.”
“top-notch software (e.g., linux, ffmpeg, qemu, etc.)”
“I use qemu + cage + firefox and some glue logic to fire up a copy of a base image which gets deleted on exit.”
“opt to run them via QEMU on the x86 platforms”