crosvm vs StratoVirt
crosvm
chromium.googlesource.comStratoVirt
gitee.comSide by side
| Figure | crosvm | StratoVirt |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Windows | Yes | — |
| Linux | Yes | Yes |
| Android | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Hypervisor Software | 9.0 (#1) | 7.3 (#22) |
| Isolation | The project describes using Linux namespaces, seccomp filters, and dropped capabilities as part of its sandboxing approach. | The feature list describes StratoVirt as highly isolated based on hardware. |
| Product | crosvm is a secure, lightweight virtual machine monitor written in Rust that runs guest operating systems in a sandboxed environment. | StratoVirt is an enterprise-class virtual machine monitor for cloud data centers, designed to support VM, container, and serverless scenarios. |
| Security | Each virtual device runs in its own Minijail sandbox by default, with syscall security policies to restrict unwanted system calls. | The documentation lists Rust language-level security and says StratoVirt uses fewer than 46 system calls while running. |
Plans
In their own words
crosvm
crosvm is a free, open-source virtual machine monitor written in Rust for running Linux and Android guest systems in sandboxed environments. Developed for ChromeOS, it is also used in TerminalApp on Android, Cuttlefish, and Windows. Each virtual device runs in its own Minijail sandbox by default, with syscall policies, namespaces, seccomp filters, and dropped capabilities contributing to isolation. Supported CPU architectures are x86_64, aarch64, and riscv64. The project lists KVM, Gunyah, GenieZone, and Halla for Linux or Android, and WHPX and HAXM for Windows. Virtio devices cover networking, storage, GPU, audio, filesystems, console, RNG, ballooning, vsock, TPM, and video. Block storage supports raw, qcow2, zstd, and Android sparse formats. Linux hosts need kernel 4.14 or newer with KVM support; some devices have additional host requirements. The project documents obtaining crosvm from its source repository and building it with Cargo. SCSI, video, shared host directories via virtio-pmem, and snapshotting are marked experimental or highly experimental.