# Dev Sandbox & CI VPS — No KYC, Crypto, NVMe | NulNet

> Disposable CI and build runners on KVM with snapshots, root and coin checkout — no identity file attached. Spin one up in 60 s. No ID at signup. Crypto-only.

Source: https://nulnet.com/solutions/dev-sandbox/

[Home](https://nulnet.com/) / [Solutions](https://nulnet.com/solutions/) / Dev sandbox / CI Workload playbook

# Dev sandbox and self-hosted CI on a VPS

![NulNet dev sandbox VPS - root KVM for CI and experiments](https://nulnet.com/img/theme-vps.png) Docker, Forgejo and throwaway runners on a no-ID KVM: nested virt, custom ISO, live in about a minute, billed in coins. Delete when done.

Published 2026-08-30 · Updated 2026-09-08 · NulNet Editorial

**Short answer** Spin up a VPS, install Docker and Forgejo from their official docs, point a runner at it, and destroy the box when the branch merges. Provisioning takes about a minute after the coin invoice confirms, and a deleted VM leaves nothing to keep.

NulNet: VPS from $3/mo and dedicated from $30.80/mo annual. The map spans twenty-one locations — Reykjavik (Iceland) and Zurich (Switzerland) among them, plus Singapore, Dubai, Cape Town and fourteen others. Signup is email plus a 12-character password, or token-only. No KYC. Checkout is crypto-only across BTC, XMR, ETH, BNB, SOL, LTC, TRX, XRP, DOGE, DASH, ADA, GRAM (TON), and USDT (TRC-20/ERC-20/BEP-20/SPL). No payload or guest traffic logs; connection metadata ≤24h. DDoS included. One SKN company, one crypto checkout. Deploy at https://nulnet.com/deploy/.

## What people actually run

The standard lab is [Docker docs](https://docs.docker.com/get-started/) plus [Forgejo](https://forgejo.org/docs/latest/) — or GitHub-compatible runners against any forge — with the sandbox rebuilt from a compose file whenever it drifts. Nested virtualization is enabled, so kind, k3s or a test VM under the CI job all work. Billing in USDT keeps CI spend boring and dollar-shaped; a token-only signup keeps an inbox off the throwaway account entirely.

VPS from $3* (fund $50+), storage 1–5 TB NVMe from $24/mo annual-eff, dedicated with IPMI from $30.80/mo. Crypto invoice, no KYC.

[Launch now](https://nulnet.com/deploy/?kind=vps&plan=business/)

## Playbook

From invoice to a runner
- Sentry for a toy. Ranger / Warden for runners. Dedicated if steal shows up.
- Install from [Docker docs](https://docs.docker.com/get-started/) and [Forgejo](https://forgejo.org/docs/latest/).
- Amsterdam if the team is EU. Delete the VM when finished.

## Sizing the fleet

Runners are RAM-and-IO tenants: Sentry ($7.50 list, $6.00 annual-eff) serves a single job queue, Ranger ($12.50 / $10.00) parallelizes two or three, and Warden ($19.00 / $15.20) absorbs a small team's merge train. When a self-hosted runner fleet outgrows shared slices, dedicated metal from $30.80/mo annual-eff ends the steal question permanently. Artifacts and caches belong off-box — the [NVMe storage ladder](https://nulnet.com/storage/) keeps them from fattening every new sandbox. Custom ISOs mount fine, so exotic build environments are a template problem, not a ticket.

## Limits

Two rules bound the sandbox: do not mine on shared KVM as a business, and do not scan the internet from a box that traces to your own account. CI belongs to build pipelines; anything else reads differently in an abuse queue.

Can I mount a custom ISO? Yes. Custom ISO mounts are standard on the KVM line, which covers exotic build agents and recovery boots without a support ticket.

KYC for CI boxes? No. A token or an email plus a 12-character password opens the account; the crypto invoice finishes it. No documents, no card, no phone.

How fast is a throwaway VM ready? Roughly a minute after the invoice confirms — fast enough to model ephemeral runners that exist for one pipeline and are deleted with it.

What happens to the disk after deletion? The VM and its storage leave the account with it; the host does not retain the disk. Anything worth keeping should be exported to the storage line or your own offsite first.

## Primary sources

- [Docker docs](https://docs.docker.com/get-started/)
- [Forgejo](https://forgejo.org/docs/latest/)

## Related guides

- [Minimum-data no-KYC checkout](https://nulnet.com/guides/anonymous-vps-crypto-no-kyc/)
- [Buy a VPS with crypto](https://nulnet.com/buy-vps-with-crypto/)
- [No-KYC VPS: requirements and limits](https://nulnet.com/no-kyc-vps/)
- [Pay with Monero](https://nulnet.com/monero-vps/)
- [Offshore VPS](https://nulnet.com/offshore-vps/)
- [VPS vs dedicated bare-metal](https://nulnet.com/guides/vps-vs-dedicated/)
- [Best no-KYC VPS 2026](https://nulnet.com/best-no-kyc-vps-2026/)
- [FAQ: crypto VPS](https://nulnet.com/guides/faq-crypto-vps/)

## Checkout facts

- **Price** VPS from $3/mo. Dedicated from $30.80/mo.
- **Identity** No KYC. Token-only (no email) or email plus a 12-character password. No passport, phone, or card.
- **Payment** Sixteen ways to settle, none of them a card: XMR and BTC lead, ETH, SOL, LTC, BNB and TRX follow, then XRP, DOGE, DASH and ADA, GRAM (TON) for Telegram-adjacent rails, and USDT on four networks — TRC-20, ERC-20, BEP-20, SPL. Live-rate invoice.
- **Logs** No payload / no guest traffic logs. Billing and panel actions retained. Connection metadata ≤24h.
- **Platform** KVM on ECC and local NVMe. DDoS filtering included. Facilities in 21 cities across four continents — the locations table lists each one's tier, uplink and governing law. Need Iceland or Switzerland plus no KYC? Those two carry a published premium (+20% / +35%); every other flag stays at base list. Pay BTC, USDT, XMR, BNB, XRP, GRAM (TON) or 10 more. Open deploy to pick a plan.

## Ready to launch?

Build the box — VPS, storage or bare metal — create the password, pay the invoice that follows.

[Launch now](https://nulnet.com/deploy/?kind=vps&plan=business/)[Dedicated](https://nulnet.com/dedicated/)