Sandboxes

gVisor

Add a userspace kernel between container workloads and the host operating system.

19.7K GitHub starsAs of Checked

Where it fits

What you can use it for

Container isolation for untrusted code.

Give untrusted code a controlled place to run.

Before you adopt

What to check for your team

Check syscall and workload compatibility. Isolation depends on host setup and the surrounding deployment.

Get help evaluating the fit

Licence and scope

Apache-2.0

Applies to this repository. Dependencies, models, and hosted services can have separate terms.

Read the upstream licence

Support the work

Go directly to the maintainers

Use the project's contribution guidance to report issues, help with documentation or contribute code. Follow any published funding links if you want to support the maintainers financially.

Find contribution guidance

Keep exploring

Also in sandboxes

Back to all projects