firecracker-microvm/firecracker ? reverse-engineered prompt

Build me a secure lightweight virtualization tool for Linux that can run container or function workloads inside tiny microVMs. I want it focused on fast startup, low memory use, and strong isolation for multi tenant serverless style workloads.

It should have a simple host API that lets me create and configure a microVM, set CPU and memory, attach network interfaces, add read write or read only disks from files, configure logs and metrics, pass guest metadata, add vsock support, and start the VM with a kernel image, root file system, and boot arguments.

Keep the design minimal, with only the devices needed for this use case, so the attack surface stays small. Include a safe production launcher that can isolate the process with Linux security features and drop privileges before the VM runs.

Please build it in Rust, include clear docs, a quickstart for building and running it on a Linux host with KVM, and basic tests. Look up current docs online if you need to.