gVisor

aid: gvisor:gvisor
name: gVisor
description: gVisor is an open-source application kernel written in Go that provides an additional layer
  of isolation between containerized applications and the host operating system. It implements a substantial
  portion of the Linux system call interface in user space, making it compatible with most Linux applications
  while providing stronger security guarantees than traditional container runtimes.
humanURL: https://gvisor.dev/
tags:
- Containers
- Kernel
- Linux
- Open Source
- Sandboxing
- Security
properties:
- type: Documentation
  url: https://gvisor.dev/docs/
- type: GettingStarted
  url: https://gvisor.dev/docs/user_guide/quick_start/docker/