gVisor vs Incus

gVisor is a free, open-source Linux-compatible sandbox and application kernel for running containers while isolating the host from untrusted code. It is intended for workloads such as user-uploaded, LLM-generated, and third-party code. Instead of passing sandboxed applications’ system calls directly to the host, its Sentry handles them; a Gofer process mediates filesystem access. The project describes a least-privilege design with a restrictive system call filter. It documents use with Docker, Kubernetes, containerd, and OCI runtimes, including Kubernetes configurations using GKE Sandbox, Minikube, or containerd with the gVisor shim. gVisor can stream application trace points to an external threat detection engine such as Falco, and can checkpoint and restore containers. Most CUDA applications can run unmodified in the sandbox with selected NVIDIA driver versions, but GPU support is restricted to certain models, drivers, capabilities, device files, ioctl calls, and platforms. Installation requires Linux 5.6 or later on x86_64 or ARM64. Compatibility is best-effort, and some applications may not work because not every system call, /proc file, or /sys file is implemented. Hardware side-channel protection is generally not provided.

Incus is free software for managing system containers, application containers, and virtual machines. Instances can share storage and networking, and administrators can manage them through a command-line tool, REST API, or third-party integrations. The software supports snapshots, backup and recovery, migration, configurable storage pools and networks, and resource controls. The project describes its API as suitable for use from a laptop through clusters of thousands of compute nodes. Documented integrations include Terraform, OpenTofu, Ansible, Packer, Distrobuilder, GARM, Kubernetes Cluster API, and Incant. The daemon runs on Linux; client applications are available for Windows and macOS, with FreeBSD client packages also listed. Upstream does not directly provide packages, so installation is through Linux distributions, third-party repositories, or source. Incus is developed under the Apache 2 license. Containers are unprivileged by default, but access to the Unix socket grants full control, so it should be limited to trusted users. The 6.0 LTS release is supported until June 2029; feature releases are normally supported until the next release.