Nested Blips

Allocate VMs from inside an existing blip

From inside an allocated VM you can SSH back to the gateway to get another VM. Each VM has a client key generated at boot and an injected SSH config pointing back to the gateway.

Connect

ssh blip

Identity propagation

The gateway resolves the original user’s identity through the VM client key. Nested VMs are owned by the original user, not the intermediate VM:

  • Per-user quotas (--max-blips-per-user) count against the original user.
  • blip retain on a nested VM produces a session ID the original user can reconnect to directly.

Next steps

← OIDC Authentication GitHub Actions Runner →