Tag

gVisor

3 results tagged "gVisor"

Projects

↗
zviz Zig

Research into low-overhead sandboxing for untrusted code. An OCI-compatible Zig runtime that lets 132 syscalls through natively and denies 24 at seccomp.

MIT ★ 1 sandboxing code

Articles

Safe Computing

zviz vs gVisor vs Firecracker: Sandboxing AI Code

Deny, emulate or virtualise? How zviz's selective-denial container runtime compares with gVisor, Firecracker and WASM for running untrusted AI code.

sandboxingcontainer-runtimeOCI
Safe Computing

Sandboxing Untrusted Code in Zig: The zviz Architecture

How zviz contains untrusted and AI-generated code by selective denial: namespaces, Landlock, seccomp-BPF and cgroups v2, with policy built at Zig comptime.

zigsandboxinggVisor