In summary, uses KVM to run full Linux VMs with isolated virtual hardware on each box, and each microVM (cell) is tied to a Firecracker process in a 1:1 setup.