Booting a VM in 4 Seconds and Talking to It Without a Network

Building a Firecracker MicroVM rootfs, wiring up TAP networking, debugging UFW's FORWARD chain, and writing a guest agent with raw vsock syscalls in Go.