{"full_name":"google/gvisor","owner":"google","name":"gvisor","url":"https://github.com/google/gvisor","description":"Application Kernel for Containers","homepage":"https://gvisor.dev","topics":[],"language":"Go","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/1342004?v=4","created_at":"2018-04-26T21:28:49Z","pushed_at":"2026-11-10T09:22:01Z","metrics":{"stars":19947,"forks":2070,"watchers":317,"issues":2242,"prs":14677,"releases":11,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":8},"growth":{"day":{"stars":16,"forks":1,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[19931,19947],"forks":[2069,2070],"watchers":[317,317],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[{"full_name":"google/EarlGrey","name":"EarlGrey","boards":{}},{"full_name":"google/ExoPlayer","name":"ExoPlayer","boards":{}},{"full_name":"google/WebFundamentals","name":"WebFundamentals","boards":{}},{"full_name":"google/adk-go","name":"adk-go","boards":{}},{"full_name":"google/agents-cli","name":"agents-cli","boards":{}},{"full_name":"google/artemis","name":"artemis","boards":{"new":28}},{"full_name":"google/ax","name":"ax","boards":{}},{"full_name":"google/bbr","name":"bbr","boards":{}},{"full_name":"google/bigframes","name":"bigframes","boards":{}},{"full_name":"google/bloaty","name":"bloaty","boards":{}},{"full_name":"google/cadvisor","name":"cadvisor","boards":{}},{"full_name":"google/clasp","name":"clasp","boards":{}},{"full_name":"google/clusterfuzz","name":"clusterfuzz","boards":{}},{"full_name":"google/elephant-goldfish-model","name":"elephant-goldfish-model","boards":{"daily":27,"weekly":114,"daily_rate":23,"weekly_rate":66,"new":29}},{"full_name":"google/flatbuffers","name":"flatbuffers","boards":{}},{"full_name":"google/flexbox-layout","name":"flexbox-layout","boards":{}},{"full_name":"google/gemma_pytorch","name":"gemma_pytorch","boards":{}},{"full_name":"google/go-cloud","name":"go-cloud","boards":{}},{"full_name":"google/googletest","name":"googletest","boards":{}},{"full_name":"google/guava","name":"guava","boards":{}}],"issues":[{"number":7469,"title":"Netfilter config is not handled on runsc boot, reopen of: \"DNS not working in Docker Compose\"","comments":30,"created_at":"2022-04-28T16:15:27Z"},{"number":267,"title":"Implement membarrier","comments":24,"created_at":"2019-05-31T06:35:56Z"},{"number":9827,"title":"NV50_P2P allocation class unimplemented in nvproxy","comments":22,"created_at":"2023-12-17T19:20:11Z"},{"number":11543,"title":"Error: OCI runtime error: runsc: creating container: systemd error: Interactive authentication required.","comments":21,"created_at":"2025-03-11T23:58:46Z"},{"number":139,"title":"Signalfd support","comments":21,"created_at":"2019-03-14T11:34:39Z"},{"number":13439,"title":"support guest Landlock syscalls for in-sandbox application sandboxing","comments":20,"created_at":"2026-06-13T13:56:18Z"},{"number":8196,"title":"runsc install -> panic: Only 4K page size is supported on arm64!","comments":18,"created_at":"2022-11-15T08:05:27Z"},{"number":2270,"title":"Use error wrapping in Go 1.13","comments":18,"created_at":"2020-03-26T22:54:32Z"}],"discussions":[{"number":17020,"title":"gVisor is moving to github.com/gvisor","comments":0,"category":"Announcements","created_at":"2026-11-05T02:19:04Z"},{"number":16652,"title":"gVisor is now on CNCF Slack: #gvisor and #gvisor-dev","comments":0,"category":"Announcements","created_at":"2026-10-29T00:29:45Z"},{"number":15237,"title":"gVisor is being donated to CNCF","comments":0,"category":"Announcements","created_at":"2026-10-02T22:00:22Z"},{"number":15097,"title":"What Linux kernel APIs it uses to work?","comments":1,"category":"Q&A","created_at":"2026-09-29T11:43:13Z"},{"number":14851,"title":"Installing gVisor on Fedora...using apt","comments":1,"category":"General","created_at":"2026-09-19T17:35:27Z"},{"number":14825,"title":"Drop: a sandbox for day-to-day dev work with gVisor support","comments":1,"category":"Show and tell","created_at":"2026-09-18T10:53:53Z"},{"number":14280,"title":"gVisor+Kubernetes=Isola","comments":1,"category":"Show and tell","created_at":"2026-08-22T09:03:00Z"},{"number":14274,"title":"gVisor discussions board","comments":0,"category":"Ideas","created_at":"2026-08-22T02:11:12Z"}],"latest_release":{"name":"gVisor 20261102.0","tag":"release-20261102.0","published_at":"2026-11-02T22:00:15Z","body":"## gVisor release 20261102.0\n\nBinaries are also available from the apt repository and the release bucket;\nsee [Installation](https://gvisor.dev/docs/user_guide/install/).\n\n### Changes since `release-20261026.0`\n\n```text\nproc: generate /proc/cpuinfo on read (7a675ac66)\nproc, sys, kernfs: lazily populate /proc/sys and /sys/devices/system/cpu (8a719e832)\nkernfs, proc, sys: Evict cached dentries in PrepareSave (918aefd5f)\nStart the gofer with GOMAXPROCS bounded by its cgroup and capped at 8. (0cf7325e4)\npkg/state, runsc: switch default state engine to graph (6e6276344)\nrunsc/cmd, pkg/state: harden statefile output, HTML, and HMAC checks (85dbf4e65)\npkg/state: fix graph engine round-trip and pooled scratch bugs (0bbcbf9de)\nAvoid holding shim locks across container creation and cache nil PodExtension. (7b2516a55)\nCheck SampledTimer EventRegister errors, and fix a stale comment (4f5ce20bd)\nDon't let CLOCK_MONOTONIC go backwards when a restored kernel resumes (14313213c)\nrunsc/container: add active workload and cross-engine checkpoint E2E tests (3fb68e32c)\nbuildkite coordinator: fetch maintainers from governance/maintainers.yaml (dfeb3ce48)\nbuildkite: skip unnecessary clones (2116e5da2)\nRewrite vdsoClockGettime (085e111d7)\nrunsc: add --state-engine flag and per-checkpoint override (fc74469da)\nAdd runsc do and sandboxexec benchmarks. (558e98d97)\nrunsc/cmd, test/runner: forward statefile dumps to gvisor_sentry (1216e0f05)\ngovernance: add maintainers' GitHub user IDs (8f15deb0c)\npkg/state/tests: run existing and callback tests with both engines (1398e3d66)\npkg/state: fix graph engine type info, type cache, and map hook edge cases (cabf43bcb)\npkg/state: add deferred decoding and PrintGraph unit tests (d12b0a39b)\npkg/state: add zero-sized value round-trip tests (8028e17d6)\nCalibrate the clocks during restore, so the VDSO works on resume (eeb83261a)\nDon't count time spent checkpointed in CLOCK_MONOTONIC (bd0e84e0f)\nMeasure relative CLOCK_REALTIME sleeps and timers with CLOCK_MONOTONIC (d87a01824)\nBuild the Bun spawn image with Bazel (a693e2364)\npkg/state: add round-trip tests for array aliasing and aliased maps (f8de95433)\ntools/go_stateify: emit typed calls, registration, and callbacks (20/21) (cd90d7a74)\nAdd raw sandbox boot benchmarks. (a37bafc5d)\npkg/state: add typed Sink/Source methods and dual-engine dispatch (19/21) (aa5305e99)\nAdd seccomp-bpf filter rules for netgofer. (757d67e79)\npkg/state: add graph stream pretty-printer and typeInfo tests (18/21) (fbef70ac6)\npkg/state: add deferred object decoding and callback scheduler (17/21) (85d46891e)\npkg/state: add value and composite decoding to graph decoder (16/21) (3dd75fc57)\npkg/state: add graph decoder state and object/target table readers (15/21) (d8ff47859)\nbuildkite: rename the untrusted cluster's queue to `untrusted` (a7203afca)\npkg/state: add stream assembly to graph encoder (14/21) (6fb2e9fe2)\nrdmaproxy: reject unsupported QP creation modes (98dae51e6)\ngofer: restore the read-locked fast path in ensureSharedHandle (97d1256de)\npkg/state: add value, map, struct, and splice encoding to graph encoder (13/21) (8f9e31edd)\nkernel: index unimplemented-syscall metric field values by a slice (ac2fe8a8e)\nKeep FUSE device watches attached after connection abort (1e5a147a4)\npkg/state: add pointer and slice target resolution to graph encoder (12/21) (f4b41f15b)\npkg/state: add graph encoder state and object slabs (11/21) (9010b868a)\npkg/state: add per-stream type caches, type table, and graph stats (10/21) (0fa6803f2)\npkg/state: add reflection-free runtime typeInfo (9/21) (03e72471a)\nLink host-run benchmarks and the container test app statically (b9193eed0)\npkg/state: add encoding buffers and open-addressed address map (8/21) (f8cc8437f)\npkg/tcpip/network/ipv4: remove unused IP ID generation state (7/21) (ac7b4e0fd)\nAutomated rollback of changelist 1009271256 (f4c82a02f)\npkg/cpuid: save static CPUID function as packed bytes (6/21) (bcd924122)\nnvproxy: Mark NVIDIA driver 580.95.05 as supported "},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}