seL4 is a formally verified microkernel whose C implementation is backed by machine-checked mathematical proofs of correctness, confidentiality, integrity, and availability. It enforces strict isolation between processes through hardware-enforced address space separation and a capability-based access control system, where each process holds explicit rights only to the resources it has been granted. The kernel exposes hardware resources through a minimal API of system calls that manage threads, address spaces, and inter-process communication, with synchronous IPC supporting sender-identifying b
microvm.nix is a declarative virtual machine manager and orchestrator for defining, building, and managing isolated guest environments using Nix. It functions as a virtual machine image builder that transforms system specifications into bootable disk images and runner scripts. The project provides a hypervisor abstraction layer, enabling the deployment of guest images across multiple virtualization backends through a unified configuration. It includes specialized tools for PCI hardware passthrough, granting virtual machines direct access to physical host USB and PCI devices. The framework co
Waydroid is a containerized mobile runtime that executes a full Android operating system directly on Linux desktop environments. By utilizing Linux kernel namespaces, it isolates the mobile environment while sharing the host kernel to provide native-like performance and hardware access for mobile applications. The project distinguishes itself through deep integration with the host system, bridging mobile display buffers to native desktop windows and translating host input events into mobile gestures. It enables multi-window management, allowing mobile applications to run alongside native desk
Lima is a virtualization engine designed to provision and manage lightweight Linux, macOS, and FreeBSD virtual machines. It functions as a comprehensive virtual machine manager that leverages native hypervisors and system emulation to provide isolated environments for container development, cross-architecture testing, and secure sandboxing. The project distinguishes itself through its template-driven provisioning system, which allows users to define and automate environment configurations via local files or remote URL schemes. It integrates deeply with host systems by providing automated file
Cloud Hypervisor is a Rust-based hypervisor and KVM virtual machine monitor designed to execute 64-bit guest operating systems. It functions as a user-space virtual machine manager that employs a minimal emulation layer to reduce memory overhead and latency for cloud workloads.
The main features of cloud-hypervisor/cloud-hypervisor are: Cloud Workload Virtualizers, Cloud Workload Execution, QEMU KVM, Block Storage Services, Control Plane APIs, VM Live Migration, Virtual Machine Lifecycle Management, Cloud Workload Virtualization.
Open-source alternatives to cloud-hypervisor/cloud-hypervisor include: sel4/sel4 — seL4 is a formally verified microkernel whose C implementation is backed by machine-checked mathematical proofs of… microvm-nix/microvm.nix — microvm.nix is a declarative virtual machine manager and orchestrator for defining, building, and managing isolated… waydroid/waydroid — Waydroid is a containerized mobile runtime that executes a full Android operating system directly on Linux desktop… lima-vm/lima — Lima is a virtualization engine designed to provision and manage lightweight Linux, macOS, and FreeBSD virtual… harvester/harvester — Harvester is a hyperconverged infrastructure software platform that combines compute, storage, and networking into a… kubevirt/kubevirt — KubeVirt is a Kubernetes virtualization platform and cloud-native hypervisor manager. It provides a runtime…