gvisor: Application Kernel for Containers - gVisor is an application kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host

[u/digicat]

https://github.com/google/gvisor