gVisor

aid: gvisor
name: gVisor
description: gVisor is an application kernel written in Go that implements a substantial portion of the Linux system surface.
  It provides an additional layer of isolation between running applications and the host operating system, intercepting and
  handling application system calls in user space to reduce the attack surface of the host kernel.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Containers
- Kernel
- Linux
- Open Source
- Sandboxing
- Security
url: https://raw.githubusercontent.com/api-evangelist/gvisor/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-04-28'
specificationVersion: '0.19'
apis:
- aid: gvisor:gvisor
  name: gVisor
  description: gVisor is an open-source application kernel written in Go that provides an additional layer of isolation between
    containerized applications and the host operating system. It implements a substantial portion of the Linux system call
    interface in user space, making it compatible with most Linux applications while providing stronger security guarantees
    than traditional container runtimes.
  humanURL: https://gvisor.dev/
  tags:
  - Containers
  - Kernel
  - Linux
  - Open Source
  - Sandboxing
  - Security
  properties:
  - type: Documentation
    url: https://gvisor.dev/docs/
  - type: GettingStarted
    url: https://gvisor.dev/docs/user_guide/quick_start/docker/
common:
- type: Website
  url: https://gvisor.dev/
- type: GitHubOrganization
  url: https://github.com/google
- type: GitHubRepository
  url: https://github.com/google/gvisor
- type: Documentation
  url: https://gvisor.dev/docs/
- type: Blog
  url: https://gvisor.dev/blog/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com