gVisor
gVisor is free, open-source software that provides a Linux-compatible sandbox and application kernel for isolating containers from the host operating system.
What gVisor is
gVisor is free, open-source software that provides a Linux-compatible sandbox and application kernel for isolating containers from the host operating system. It is intended for untrusted workloads, including user-uploaded, LLM-generated, or third-party code. Instead of forwarding sandboxed programs’ system calls directly to the host, a component called the Sentry handles them; a Gofer process mediates filesystem access. The project describes using least privileges and a restrictive system-call filter. It documents integration with Docker, Kubernetes, containerd, and OCI runtimes, and can stream application trace points to an external detection engine such as Falco. It can also checkpoint and restore containers. Installation requires Linux 5.6 or later on x86_64 or ARM64. Compatibility is not guaranteed: gVisor omits some system calls and /proc or /sys files, and its compatibility list is best-effort. The documentation also notes higher per-system-call overhead and reduced application compatibility than other isolation approaches. GPU support covers most CUDA applications only under selected configurations; it generally does not protect against hardware side channels.
Good
- Free and open source
- Supports Docker, Kubernetes, containerd, and OCI runtimes
- Can checkpoint and restore containers
- Supports rootless mode
- Can stream trace points to external detection engines
Watch out
- Requires Linux 5.6 or later
- Some applications may be incompatible
- Higher per-system-call overhead is noted
- Does not generally protect against hardware side channels
Who it suits
gVisor suits teams running untrusted container workloads on supported Linux hosts, particularly those using Docker or Kubernetes. It may also suit users who need container checkpointing or trace-point output for an external detection engine.
Verdict
gVisor offers a container isolation layer for Linux, with integrations, checkpointing, and optional trace-point streaming. Check host requirements and application compatibility, especially for GPU workloads.
Plans and prices
From gVisor's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| gVisor | Free | Open-source Linux-compatible sandbox; requires Linux 5.6+ and x86_64 or ARM64 |
The facts
Each one read from gVisor's own pages, with the date it was checked.
What it does
- Architecture
- A sandbox includes a Sentry application kernel that handles system calls and a Gofer process that mediates filesystem access.checked 4 Oct 2026
- Checkpoint and restore
- gVisor can checkpoint and restore containers for uses such as caching warmed services, resuming workloads on other machines, and saving state for forensics.checked 4 Oct 2026
- Compatibility caveat
- The application compatibility list is best-effort and does not guarantee that applications marked compatible are fully functional.checked 4 Oct 2026
- Compatibility limit
- gVisor does not implement every system call, /proc file, or /sys file, so some application incompatibilities may occur.checked 4 Oct 2026
- Container integrations
- The OCI runtime runsc integrates with Docker, Kubernetes, and containerd.checked 4 Oct 2026
- Defense in depth
- The Sentry’s access to host system calls is minimized, and the site says gVisor runs with least privileges and a strict system call filter.checked 4 Oct 2026
- GPU limits
- GPU support is limited to selected models, driver versions, capabilities, device files, ioctl calls, and platforms.checked 4 Oct 2026
- GPU support
- gVisor supports most CUDA applications on selected NVIDIA driver versions, and the GPU application can run unmodified inside the sandbox.checked 4 Oct 2026
- Hardware security limit
- gVisor generally does not protect against hardware side channels and relies on the host operating system and platform for those defenses.checked 4 Oct 2026
- Kubernetes options
- The documentation describes running gVisor with GKE Sandbox, Minikube, or Kubernetes nodes configured with containerd and the gVisor shim.checked 4 Oct 2026
- License and availability
- gVisor is described on its official site as open-source software.checked 4 Oct 2026
- Performance trade-off
- The documentation notes that gVisor has higher per-system-call overhead and reduced application compatibility compared with other isolation approaches.checked 4 Oct 2026
- Product
- gVisor is an open-source Linux-compatible sandbox for running containers.checked 4 Oct 2026
- Purpose
- gVisor is an open-source Linux-compatible sandbox and application kernel that isolates containers from the host operating system.checked 4 Oct 2026
- Requirements
- The installation guide says gVisor supports x86_64 and ARM64 and requires Linux 5.6 or later.checked 4 Oct 2026
- Runtime monitoring
- gVisor can stream application trace points to an external threat detection engine such as Falco to generate alerts.checked 4 Oct 2026
- Security design
- The Linux kernel and network stack components are written in Go, and gVisor runs with least privileges and a restrictive system call filter.checked 4 Oct 2026
- Security reporting
- The project asks that sensitive security reports be sent to its security mailing list or submitted privately through GitHub advisories, and says a response is typically provided within 48 hours.checked 4 Oct 2026
- Support
- The project directs users to GitHub issues, documentation, and mailing lists for support and community discussion.checked 4 Oct 2026
- Supported host
- Installation requires Linux 5.6 or later and supports x86_64 and ARM64.checked 4 Oct 2026
- System call isolation
- gVisor intercepts sandboxed applications’ system calls and implements them in its Sentry instead of passing them directly to the host.checked 4 Oct 2026
- Untrusted workloads
- It is intended to help safely run user-uploaded, LLM-generated, third-party, and other untrusted code.checked 4 Oct 2026
- Use case
- It is designed to isolate hosts from untrusted code, including user-uploaded, LLM-generated, and third-party code.checked 4 Oct 2026
Alternatives to gVisor
- 1
LXD
Free planWebAPILinuxSelf-hosted7.0From $25 a year - 2
BuildKit
Free planAPILinuxmacOSSelf-hosted6.8Free plan - 3
Incus
Free planAPILinuxmacOSSelf-hosted6.8Free plan - 4
Apptainer
Free planAPILinuxmacOSSelf-hosted6.7Free plan - 5
crun
Free planLinuxSelf-hosted6.5Free plan - 6
Buildah
Free planAPILinuxSelf-hosted6.4Free plan