crosvm

Overview

crosvm is a Rust virtual machine monitor built to run Linux and Android guests in isolated environments. It best suits developers and platform teams who need a configurable monitor on Linux, Android, or Windows hosts. Its device range and per-device sandboxing are strong assets, but the source-based build and Linux kernel requirements make it a poor fit for people seeking a ready-to-use desktop VM app.

Key features

crosvm places each virtual device in its own Minijail sandbox by default and applies syscall policies to restrict unwanted calls. Its isolation approach also uses Linux namespaces, seccomp filters, and dropped capabilities. That separation is valuable when limiting the exposure of individual devices matters, though it does not remove the need to satisfy host and device requirements.

Its virtio devices cover networking, block storage, GPU, audio, filesystems, console, RNG, balloon, vsock, TPM, and video. Block storage supports raw, qcow2, zstd, and Android sparse formats. The GPU can provide 2D and 3D acceleration through virglrenderer, gfxstream, or vulkano, a useful range for varied guest workloads.

The Rust crosvm_control library enables programmatic management alongside the command line, and its build generates a C/C++ compatible header. crosvm supports x86_64, aarch64, and riscv64 architectures. Snapshots and nested virtualization are supported, but live migration is not. SCSI, video, shared host directories through virtio-pmem, and snapshotting are marked experimental or highly experimental, so they are less dependable choices for production workflows.

The project originated in ChromeOS for running Linux and Android guests and is also used in TerminalApp on Android, Cuttlefish, and Windows. Users obtain it by cloning the source repository and building with Cargo; the Linux build guide also describes a development container. Linux hosts need kernel 4.14 or newer with KVM support, and some devices impose additional host requirements. Public issue tracking, Matrix chat, announcements, and a developer mailing list provide community support.

Pricing

crosvm is free and open source under the BSD-3-Clause license. Its single plan costs nothing, with no paid tier or trial. There are no seat or usage charges stated; the practical cost is the work of building it from source and meeting the host requirements.

Platforms

crosvm runs on Linux, Android, and Windows hosts, with Linux and Android listed as guest operating systems. Linux operation requires a 4.14-or-newer kernel with KVM. Hypervisor support varies by host: KVM, Gunyah, GenieZone, and Halla are listed for Linux or Android, while WHPX and HAXM are listed for Windows. The CLI is its management interface; the control library adds a programmatic route.

Who it's for

crosvm is a strong fit for developers and system builders who need sandboxed Linux or Android guests, a broad selection of virtio devices, or programmatic control. It is less suitable for casual desktop virtualization: source cloning and Cargo builds add setup work, while kernel and device requirements can narrow host choices.

Pros and cons

• Pros: Per-device Minijail sandboxing, syscall policies, namespaces, seccomp, and dropped capabilities provide multiple isolation measures.
• Pros: Broad virtio device and storage-format support suits varied guest configurations.
• Pros: The Rust control library, generated C/C++ header, snapshots, and nested virtualization support automation and integration.
• Cons: Source cloning and Cargo builds are less convenient than a packaged desktop application.
• Cons: Linux requires kernel 4.14 or newer with KVM, and some devices have extra host requirements.
• Cons: Live migration is not supported, and several device and snapshot features are experimental or highly experimental.

Alternatives

For a different option, browse Hypervisor Software. Proxmox VE is worth considering for readers seeking a freemium option with a web platform; its Premium plan is priced per occupied physical CPU socket. Multipass is a free alternative for locally launched cloud prototypes across Linux, macOS, and Windows, with host requirements varying by OS. QEMU is another free, open-source option for Linux, macOS, and Windows.

UTM is the alternative to consider for iOS or macOS; its free open-source GitHub version has no automatic updates, while the Mac App Store version is a one-time purchase. VMware Workstation Pro is free for Windows or Linux hosts on 64-bit Intel or AMD PCs, with no subscription or license key required. Harvester is a free, open-source option for Linux and self-hosted use with a web interface. Cloud Hypervisor is a free open-source VMM for Linux and self-hosted environments. GNOME Boxes is a free Linux desktop application.

Verdict

Choose crosvm if you need a sandbox-focused monitor for Linux or Android guests and can work with its host requirements and source-build workflow. Its combination of device breadth, isolation, and programmatic control is the clearest reason to choose it. Look elsewhere if you want packaged desktop convenience, live migration, or experimental features as production-ready capabilities.