7 engineers on Hacker News describe using gVisor first-hand: 2 endorse it, 0 regret it, 1 are mixed.
“I've deploy gvisor... gvisor isn't quite the same security level though.”
mixed · production · johnsmith1840 · 2026-10-05 · source ↗ · wrong label?“we didn't want to require KVM/ hardware support so we went with gVisor and have been very happy with it.”
endorse · production · insanitybit · 2026-08-14 · source ↗ · wrong label?“We use gVisor! It's an open-source application security sandbox spun off from Google. We work with the gVisor team to get the features we need”
endorse · production · ekzhang · 2024-12-02 · source ↗ · wrong label?“Since we run GVisor for container isolation we use their checkpoint/restore support for the sandboxed process state.”
neutral · production · za_mike157 · 2026-07-01 · source ↗ · wrong label?“In prod the pod itself runs under gVisor (runsc), so the microVM guest kernel is one layer inside gVisor's user-space kernel.”
neutral · production · chrismeurer · 2026-03-23 · source ↗ · wrong label?“The agent ecosystem seems to have already settled on VMs or gVisor[2] being table-stakes. We use the latter.”
neutral · production · thundergolfer · 2025-09-29 · source ↗ · wrong label?“I mentioned this in another comment thread, but we use gVisor to enforce isolation.”
neutral · production · ekzhang · 2024-12-02 · source ↗ · wrong label?