I got frustrated with how GitHub Actions lets workflows with read-only permissions poison the cache of read/write workflows (!!??!?), so yesterday night I put together an Action that runs commands in a gVisor sandbox.
GitHub - geomys/sandboxed-step: A GitHub Action that runs a command in a gVisor sandbox
A GitHub Action that runs a command in a gVisor sandbox - geomys/sandboxed-step
github.com
October 24, 2025 at 12:59 PM
I got frustrated with how GitHub Actions lets workflows with read-only permissions poison the cache of read/write workflows (!!??!?), so yesterday night I put together an Action that runs commands in a gVisor sandbox.
Time to set up gVisor to sandbox even the GUI applications I run?
Back when we started gVisor I never imagined we'd run anything this complex. It's amazing to see how far the project has come!
gvisor.dev/blog/2026/09...
Back when we started gVisor I never imagined we'd run anything this complex. It's amazing to see how far the project has come!
gvisor.dev/blog/2026/09...
Who needs VMs? Run systemd and full Linux desktop apps in gVisor
gvisor.dev
September 18, 2026 at 6:32 PM
Time to set up gVisor to sandbox even the GUI applications I run?
Back when we started gVisor I never imagined we'd run anything this complex. It's amazing to see how far the project has come!
gvisor.dev/blog/2026/09...
Back when we started gVisor I never imagined we'd run anything this complex. It's amazing to see how far the project has come!
gvisor.dev/blog/2026/09...
stereOS: a Linux based operating system hardened and purpose built for AI agents
"A full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature.
"A full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature.
February 27, 2026 at 2:16 AM
stereOS: a Linux based operating system hardened and purpose built for AI agents
"A full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature.
"A full NixOS system that you boot and then kick off agent sandboxes inside with gVisor + /nix/store namespace mounting. Each agent gets their own kernel and the /nix/store is read only by nature.
Adding networking to go-boot through UEFI Simple Network Protocol.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
September 15, 2025 at 1:26 PM
Adding networking to go-boot through UEFI Simple Network Protocol.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
For gVisor we wrote checkescape which is basically that approach written as a vet analyzer. pkg.go.dev/gvisor.dev/g...
checkescape package - gvisor.dev/gvisor/tools/checkescape - Go Packages
pkg.go.dev
June 29, 2026 at 1:19 AM
For gVisor we wrote checkescape which is basically that approach written as a vet analyzer. pkg.go.dev/gvisor.dev/g...
https://blog.radwebhosting.com/deploy-gvisor-on-ubuntu-vps
blog.radwebhosting.com
September 27, 2026 at 1:05 AM
We performed an extensive comparison of Linux vs. TamaGo network performance under a VM.
TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count).
Test envs are simpler than prod, but I think this is promising.
TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count).
Test envs are simpler than prod, but I think this is promising.
June 12, 2026 at 7:50 PM
We performed an extensive comparison of Linux vs. TamaGo network performance under a VM.
TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count).
Test envs are simpler than prod, but I think this is promising.
TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count).
Test envs are simpler than prod, but I think this is promising.
Kubernetes est comparable à une infrastructure traditionnelle.
La sécurité se gère sur tout les plans : réseaux, privilèges, conteneurs/microVM, gvisor...
La sécurité se gère sur tout les plans : réseaux, privilèges, conteneurs/microVM, gvisor...
April 19, 2025 at 9:25 AM
Kubernetes est comparable à une infrastructure traditionnelle.
La sécurité se gère sur tout les plans : réseaux, privilèges, conteneurs/microVM, gvisor...
La sécurité se gère sur tout les plans : réseaux, privilèges, conteneurs/microVM, gvisor...
One bad npm package can read your ~/.ssh. Drop runs programs in Linux user namespaces without root, keeping your tools but using a disposable home. Optional gVisor catches syscalls in user space.
September 22, 2026 at 7:05 PM
One bad npm package can read your ~/.ssh. Drop runs programs in Linux user namespaces without root, keeping your tools but using a disposable home. Optional gVisor catches syscalls in user space.
Great feedback about sketch.dev so far, thanks everyone. I’ve spent the week fixing crashes in my gvisor config to stop it falling over (I think I’ve got it), and working on a better landing page. Soon!
January 11, 2025 at 2:15 AM
Great feedback about sketch.dev so far, thanks everyone. I’ve spent the week fixing crashes in my gvisor config to stop it falling over (I think I’ve got it), and working on a better landing page. Soon!
How to Deploy #gVisor on #Ubuntu #VPS
This article provides a guide demonstrating how to deploy gVisor on Ubuntu VPS.
Introduction
gVisor is an open-source application kernel developed by Google that provides an additional security layer between containerized ...
Continued 👉 #nginx
This article provides a guide demonstrating how to deploy gVisor on Ubuntu VPS.
Introduction
gVisor is an open-source application kernel developed by Google that provides an additional security layer between containerized ...
Continued 👉 #nginx
How to Deploy gVisor on Ubuntu VPS
blog.radwebhosting.com
September 23, 2026 at 9:30 AM
Google's gVisor team just dropped a game-changer: rewriting every Linux syscall *before* execution. This "library kernel" approach promises to revolutionize security for containers and untrusted code, offering deep observability where…
https://www.tpp.blog/16w7i4e
#cybersecurity #google #gvisor
https://www.tpp.blog/16w7i4e
#cybersecurity #google #gvisor
April 18, 2026 at 7:07 AM
Google's gVisor team just dropped a game-changer: rewriting every Linux syscall *before* execution. This "library kernel" approach promises to revolutionize security for containers and untrusted code, offering deep observability where…
https://www.tpp.blog/16w7i4e
#cybersecurity #google #gvisor
https://www.tpp.blog/16w7i4e
#cybersecurity #google #gvisor
bro gvisor is just the goat
September 19, 2026 at 1:21 AM
bro gvisor is just the goat
Copy Fail? Also looks like memory safety, but is actually complexity.
xint.io/blog/copy-fa...
I am going to link to this while rejecting changes to Go crypto for years.
Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.
xint.io/blog/copy-fa...
I am going to link to this while rejecting changes to Go crypto for years.
Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.
April 29, 2026 at 10:54 PM
Copy Fail? Also looks like memory safety, but is actually complexity.
xint.io/blog/copy-fa...
I am going to link to this while rejecting changes to Go crypto for years.
Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.
xint.io/blog/copy-fa...
I am going to link to this while rejecting changes to Go crypto for years.
Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.
✨ Dopo axios e il worm ChainDrop, Drop propone una sandbox per Linux in cui npm install e gli agenti AI girano senza vedere chiavi SSH, token e credenziali cloud 👇
gomoot.com/drop-la-sand...
#drop #gvisor #kernel #Linux #opensource #sandbox
gomoot.com/drop-la-sand...
#drop #gvisor #kernel #Linux #opensource #sandbox
September 23, 2026 at 4:53 PM
✨ Dopo axios e il worm ChainDrop, Drop propone una sandbox per Linux in cui npm install e gli agenti AI girano senza vedere chiavi SSH, token e credenziali cloud 👇
gomoot.com/drop-la-sand...
#drop #gvisor #kernel #Linux #opensource #sandbox
gomoot.com/drop-la-sand...
#drop #gvisor #kernel #Linux #opensource #sandbox
No lo sé...
Una conversación con un cliente:
"Desplegamos agentes en un entorno protegido con contenedores manejados con gVisor, Spiffe, mTLS y un control de actividad interna: pasan por nuestra APIgateaway y tienen una baseline de comportamiento"
El cliente "ya... pero cómo me aseguras que..."
Una conversación con un cliente:
"Desplegamos agentes en un entorno protegido con contenedores manejados con gVisor, Spiffe, mTLS y un control de actividad interna: pasan por nuestra APIgateaway y tienen una baseline de comportamiento"
El cliente "ya... pero cómo me aseguras que..."
September 24, 2026 at 12:56 PM
No lo sé...
Una conversación con un cliente:
"Desplegamos agentes en un entorno protegido con contenedores manejados con gVisor, Spiffe, mTLS y un control de actividad interna: pasan por nuestra APIgateaway y tienen una baseline de comportamiento"
El cliente "ya... pero cómo me aseguras que..."
Una conversación con un cliente:
"Desplegamos agentes en un entorno protegido con contenedores manejados con gVisor, Spiffe, mTLS y un control de actividad interna: pasan por nuestra APIgateaway y tienen una baseline de comportamiento"
El cliente "ya... pero cómo me aseguras que..."
Day 17's problem reminded me of the BPF interpreter in gVisor which works with opcodes in a similar way.
github.com/google/gviso...
github.com/google/gviso...
January 15, 2025 at 10:03 AM
Day 17's problem reminded me of the BPF interpreter in gVisor which works with opcodes in a similar way.
github.com/google/gviso...
github.com/google/gviso...
ユーザースペースで手軽に作成できるLinux向けsandbox環境構築ツール。gVisorベース。ホスト側のファイルシステムを引き継ぎつつrootなしの環境を作れると。ちょっとしたアプリのテストやコーディングエージェントの稼働に
GitHub - wrr/drop: Linux sandboxing that doesn't get in your way
Linux sandboxing that doesn't get in your way. Contribute to wrr/drop development by creating an account on GitHub.
github.com
September 23, 2026 at 1:55 AM
ユーザースペースで手軽に作成できるLinux向けsandbox環境構築ツール。gVisorベース。ホスト側のファイルシステムを引き継ぎつつrootなしの環境を作れると。ちょっとしたアプリのテストやコーディングエージェントの稼働に
Some interesting infra projects:
WarpStream
Turbopuffer
LanceDB
Neon
AWS Neptune
TigerBeetle
Modal
Materialize
Tabular (Iceberg)
DuckDB/Motherduck
Arrow Data Fusion/Substrate
gvisor
KIP-932 (Kafka)
VeniceDB
Bauplan
Buf schema registry
Apicurio
WarpStream
Turbopuffer
LanceDB
Neon
AWS Neptune
TigerBeetle
Modal
Materialize
Tabular (Iceberg)
DuckDB/Motherduck
Arrow Data Fusion/Substrate
gvisor
KIP-932 (Kafka)
VeniceDB
Bauplan
Buf schema registry
Apicurio
October 25, 2023 at 3:20 AM
Some interesting infra projects:
WarpStream
Turbopuffer
LanceDB
Neon
AWS Neptune
TigerBeetle
Modal
Materialize
Tabular (Iceberg)
DuckDB/Motherduck
Arrow Data Fusion/Substrate
gvisor
KIP-932 (Kafka)
VeniceDB
Bauplan
Buf schema registry
Apicurio
WarpStream
Turbopuffer
LanceDB
Neon
AWS Neptune
TigerBeetle
Modal
Materialize
Tabular (Iceberg)
DuckDB/Motherduck
Arrow Data Fusion/Substrate
gvisor
KIP-932 (Kafka)
VeniceDB
Bauplan
Buf schema registry
Apicurio
I'm going down the kubernetes route instead for agent containment
failed experiments so far:
- wasm/wasi
- go-landlock
capital-P project deferred: gVisor or firecracker
failed experiments so far:
- wasm/wasi
- go-landlock
capital-P project deferred: gVisor or firecracker
February 13, 2026 at 8:17 AM
I'm going down the kubernetes route instead for agent containment
failed experiments so far:
- wasm/wasi
- go-landlock
capital-P project deferred: gVisor or firecracker
failed experiments so far:
- wasm/wasi
- go-landlock
capital-P project deferred: gVisor or firecracker
I am SSH'ing in my gaming PC bootloader to start Windows remotely.
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
GitHub - usbarmory/go-boot at development
The bare metal Go UEFI boot manager. Contribute to usbarmory/go-boot development by creating an account on GitHub.
github.com
September 22, 2025 at 12:22 PM
I am SSH'ing in my gaming PC bootloader to start Windows remotely.
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
September 22, 2026 at 5:14 PM