I don't believe they do, they use Firecracker microVMs for isolation: https://fly.io/docs/reference/architecture/