Google Hands gVisor Over to the CNCF

Google has announced that it is donating the gVisor project — name and trademarks included — to the Cloud Native Computing Foundation (CNCF), a subsidiary of the Linux Foundation. It was Google that seeded the CNCF in the first place by giving it Kubernetes; gVisor now follows the same path. The project was open-sourced under Apache 2.0 back in 2018 and, as its contributors modestly put it, has ever since remained "the second most mature implementation of Linux, after Linux."

What and when

The CNCF application was submitted on 7 September 2026, reviewed on 22 September, accepted on 28 September, and announced on 2 October. Over the coming weeks the project will enter CNCF Sandbox status (an aptly named stage for a sandboxing runtime), build and testing will shift to GitHub Actions and Buildkite, and Google's internal infrastructure will stop blocking pull requests. Governance moves to a maintainer-based model that brings in non-Google maintainers. Within a few months come Incubation status, a repository move out of the google GitHub organization, and org-based voting that strips Google of unilateral control.

Why do it

The authors are candid about the problems that have piled up. gVisor refuses to fit the industry's tidy split between "plain containers" and "virtual machines": it offers security on par with virtualization yet never ticks the "virtualization" box that auditors and regulators often treat as a proxy for "secure." That has made its value hard to communicate.

The second woe is a performance reputation. Inside Google, Ant Group, and Modal there are Linux kernel patches that speed gVisor up considerably, but out of the box certain I/O-heavy workloads regress. Attempts to upstream those patches were rebuffed precisely because gVisor was a wholly Google-owned project.

Finally, the project has non-commercial potential that is hard to prioritize under corporate ownership: running Linux programs on macOS the way Wine runs Windows apps, and a practical desktop Linux sandbox — more secure than bubblewrap or flatpak, yet easier than Qubes OS.

Who stays

Current adopters include Google, Ant Group, OpenAI, Anthropic, Modal, and Tines. The move to CNCF is meant to open the door to hobbyists and the "middle" of the industry. Google is not walking away — on the contrary, its engineers pushed for this internally, hoping to repeat the Kubernetes story. Ant Group, Modal, and Tines are joining as long-term maintainers, while OpenAI, Tencent, and NVIDIA will keep contributing. You can talk it over at KubeCon North America 2026.

Source: Lobsters