back to microsandbox

compare

microsandboxvsgvisor

pick gvisor to harden a linux container platform with an oci-compatible userspace kernel and public security record. [1][2] pick microsandbox for a hardware microvm, full guest kernel, and the agent runtime around it.

gvisor is an open-source application kernel, not a virtual-machine hypervisor. its sentry intercepts workload system calls and implements a linux-compatible interface in userspace, reducing direct exposure to the host kernel. [1]

microsandbox chooses a different boundary: a hardware microvm with a full guest kernel. it then packages that boundary with oci image handling, lifecycle, language sdks, destination-bound credentials, and network policy.

gvisor's public security record is a real capability for teams that use that evidence in isolation review. [2] choose gvisor when the runtime must fit under an existing linux container platform. choose microsandbox when the application needs a complete, cross-platform sandbox runtime.

microsandbox
local + cloud
gvisor
userspace application kernel [1]
boundary
hardware microvm with a separate guest kernel
userspace application kernel written in go [1]
published security record
hardware-boundary architecture and open runtime source
public curated record of high-impact linux kernel cves and outcomes [2]
linux compatibility
full linux guest kernel
sentry reimplements the linux system-call interface; unsupported features remain unavailable [1]
host platforms
macOS · Linux · Windows (WHP, preview)
linux hosts on amd64 and arm64 [1]
container-platform fit
standalone agent runtime that consumes oci images
oci-compatible runtime used under docker or kubernetes [1]
what ships
oci images, lifecycle, policy, sdk, and cli
the isolation runtime for a platform to integrate [1]
license
apache 2.0
apache 2.0 [3]
pick gvisor

choose gvisor when

  • you want an oci runtime that fits beneath docker or kubernetes. [1]
  • the public security record is part of your review requirement. [2]
  • your workload fits gvisor's documented linux compatibility surface. [1]
  • linux amd64 and arm64 are the host targets you need. [1]
pick microsandbox

choose microsandbox when

  • you want a hardware microvm and full guest kernel for every sandbox.
  • the runtime must also work on a developer mac or windows preview.
  • your application needs lifecycle, policy, sdks, and oci image flow as one product.
  • you do not want to assemble the sandbox application around an isolation primitive.

01

what microsandbox adds

gvisor is designed to slot into a container stack. that is useful when kubernetes or docker already owns image distribution, workload scheduling, and operations, and the missing piece is an interposed application kernel. [1]

microsandbox owns the application-facing layer as well as the boundary. an sdk creates the sandbox, oci images supply the workload, and host-side credential and network policy travel with the runtime. the trade is a different integration point, not a claim that gvisor is an ordinary container.

common questions

is microsandbox a gvisor alternative?

yes when the goal is safer untrusted-code execution, but they integrate at different layers. gvisor is an oci-compatible userspace kernel for container platforms. [1] microsandbox is a complete agent sandbox runtime.

is gvisor a virtual machine?

no. gvisor is an application kernel that handles workload system calls in userspace. [1] microsandbox uses a hardware microvm with a full guest kernel.

does gvisor sandbox untrusted code?

gvisor is built to isolate containers by reducing direct interaction with the host kernel. [1] review its compatibility and security record against your workload and threat model. [2]

is gvisor open source?

yes. google publishes gvisor under apache 2.0. [3] microsandbox is also apache 2.0.

does gvisor run on macos?

gvisor documents linux hosts on amd64 and arm64. [1] microsandbox runs on macos, linux, and windows whp in preview.

run it locally.

put the boundary on your own machine before you choose anything else.

run it locally