I'm hoping that Gondolin-like Programmable network proxy is on the horizon

[airtonix]

Which unlocks the ability to leave real credentials outside the vm and only placeholders within.

[BinSquare]

Passing through credentials from outside the VM to inside is available today in: https://github.com/smol-machines/smolvm/blob/main/AGENTS.md#secrets

Progammable networking proxy can definitely be on the horizon - I'll add it to be prioritized today

[kcosr]

I’ve built a container-based approach that transparently sends TCP flows to an external HTTP-aware authorization relay using iptables. For smolvm, a programmable virtio-net egress hook that routes some or all flows to an external service, carrying the original destination metadata, would be useful. Something like SOCKS5 over UDS or a TLS-wrapped TCP connection would provide a general-purpose connector interface.

[kcosr]

I created a small POC, though it uses a proprietary protocol that would not be a good fit for smolvm.

https://x.com/kcosr/status/2081769505831759952
https://github.com/kcosr/smolvm/tree/awaf-export-integration