gvisor

About this project

What is gVisor? gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language (Go) and runs in userspace. gVisor includes an Open Container Initiative (OCI) runtime called runsc that makes it easy to work with existing container tooling. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers. What isn't gVisor? gVisor is not a syscall filter (e.g. seccomp-bpf), nor a wrapper over Linux isolation primitives (e.g. firejail, AppArmor, etc.). gVisor is also not a VM in the…

GitHub

Reviews

Built by

google

Imported from GitHub · not yet claimed on GitPalace

View developer pageSign in with GitHub to claim

Maintain google/gvisor? Claiming verifies admin access through your GitHub account and gives you control of this listing.

You might also like

kubernetes

Infrastructure

Production-Grade Container Scheduling and Management

★ New126.4K stars

by kubernetes

immich

Infrastructure

High performance self-hosted photo and video management solution.

★ New113.5K stars

by immich-app

RuView

Infrastructure

π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection

★ New92.6K stars

by ruvnet

Stirling-PDF

Infrastructure

#1 PDF Application on GitHub that lets you edit PDFs on any device anywhere

★ New91.4K stars

by Stirling-Tools