cid 32768d67d5246aa060986b1853b63814d0ba3fb65932b61e66eb6277a199c208 · original · open access · via wikipedia
Title: GVisor Authors: Venue: Wikipedia Year: unknown Canonical: wiki:gvisor URL: https://en.wikipedia.org/wiki/GVisor Collector: wikipedia OA: true ABSTRACT gVisor is an open-source container sandbox developed by Google that focuses on security, efficiency, and ease of use. It provides virtualization-like isolation while maintaining the resource efficiency of standard containers. gVisor intercepts application system calls and implements a large portion of the Linux system call ABI in userspace, offering additional security compared to standard containers that run directly on top of the Linux kernel and are isolated merely with namespaces. Unlike the Linux kernel, gVisor is written in the memory-safe programming language Go to prevent common pitfalls which frequently occur in software written in C. Modern features of the platform include checkpoint/restore functionality and Nvidia GPU/CUDA and Google Cloud TPU support for AI/ML workloads.