Sandboxes
gVisor
Add a userspace kernel between container workloads and the host operating system.
19.7K GitHub starsAs of Checked
Where it fits
What you can use it for
Container isolation for untrusted code.
Give untrusted code a controlled place to run.
Before you adopt
What to check for your team
Check syscall and workload compatibility. Isolation depends on host setup and the surrounding deployment.
Get help evaluating the fitLicence and scope
Apache-2.0
Applies to this repository. Dependencies, models, and hosted services can have separate terms.
Read the upstream licenceSupport the work
Go directly to the maintainers
Use the project's contribution guidance to report issues, help with documentation or contribute code. Follow any published funding links if you want to support the maintainers financially.
Find contribution guidanceKeep exploring
