crosvm vs Multipass

crosvm is a free, open-source virtual machine monitor written in Rust for running Linux and Android guest systems in sandboxed environments. Developed for ChromeOS, it is also used in TerminalApp on Android, Cuttlefish, and Windows. Each virtual device runs in its own Minijail sandbox by default, with syscall policies, namespaces, seccomp filters, and dropped capabilities contributing to isolation. Supported CPU architectures are x86_64, aarch64, and riscv64. The project lists KVM, Gunyah, GenieZone, and Halla for Linux or Android, and WHPX and HAXM for Windows. Virtio devices cover networking, storage, GPU, audio, filesystems, console, RNG, ballooning, vsock, TPM, and video. Block storage supports raw, qcow2, zstd, and Android sparse formats. Linux hosts need kernel 4.14 or newer with KVM support; some devices have additional host requirements. The project documents obtaining crosvm from its source repository and building it with Cargo. SCSI, video, shared host directories via virtio-pmem, and snapshotting are marked experimental or highly experimental.

Multipass runs cloud-style virtual machines on Linux, macOS, and Windows workstations. It is intended for prototyping cloud deployments locally and creating customized Linux development environments. Instances can use cloud-init metadata, including custom definitions for configured servers, and local workflows can model deployments for AWS, Azure, Google, IBM, and Oracle. Multipass fetches Ubuntu images from Canonical and offers a growing catalogue of images with pre-installed applications. Users can share host files and folders with instances; the primary instance integrates with the native filesystem and has dedicated hot-key access. Both command-line and graphical interfaces are available, and the documentation covers Windows Terminal integration and running Docker containers in an instance. Host hypervisors are Host Compute System on Windows, Apple Virtualization on macOS, and QEMU on Linux. The product is free; the listed plan costs nothing, with host requirements varying by operating system. Anyone with access to the Multipass daemon socket can fully control the software, including mounting host filesystems and changing instance security features. Canonical advises limiting daemon access to trusted users. Its access controls begin with group membership and can later use a user TLS certificate.