Pull to refresh
Logo
Google donates gVisor sandbox to CNCF

Google donates gVisor sandbox to CNCF

Money Moves

Container sandbox project moves to neutral governance after eight years under Google

3 days ago: Google announces the donation publicly

Overview

Updated 2 hours ago

Google open-sourced gVisor in 2018. Eight years later, the company is handing the container sandbox project to the Cloud Native Computing Foundation (CNCF), the same organization that governs Kubernetes.

The donation shifts gVisor from Google-controlled to neutral governance. It also removes a barrier: Linux kernel maintainers had rejected gVisor performance patches because the project was Google-owned.

Why it matters

If gVisor thrives under neutral governance, secure container sandboxing could become a standard offering on more clouds, not just Google's.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

8 years
Time from open-sourcing to CNCF donation
Google open-sourced gVisor in 2018; the CNCF donation was announced in October 2026.
3
Companies committing to long-term maintainership
Ant Group, Modal, and Tines have committed to joining gVisor's maintainers.
2
Layers in gVisor's sandbox
The Sentry userspace kernel plus Linux seccomp, pivot_root, and namespaces beneath it.

Voices

Curated perspectives — historical figures and your fellow readers.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

People Involved

Organizations Involved

Timeline

May 2018 October 2026

5 events Latest: 3 days ago
Tap a bar to jump to that date
  1. Google announces the donation publicly

    Latest Announcement

    Google publishes a blog post announcing the gVisor donation, including governance changes and the path to Incubation status.

  2. CNCF accepts gVisor into Sandbox

    Decision

    The Cloud Native Computing Foundation accepts gVisor into its Sandbox program, the entry-level tier for CNCF projects.

  3. CNCF reviews the application

    Review

    The Cloud Native Computing Foundation reviews Google's gVisor donation application.

  4. Google submits CNCF donation application

    Filing

    Google files its application to donate gVisor to the Cloud Native Computing Foundation.

  5. Google open-sources gVisor

    Launch

    Google releases gVisor under the Apache 2.0 license as a userspace Linux kernel implementation for container sandboxing.

Scenarios

1

gVisor reaches CNCF Incubation status

Likely Resolves by Q2 2027

Discussed by: The gVisor team's announcement, which states Incubation is the goal over the coming months

The project moves from Sandbox to Incubation status. This requires meeting CNCF's criteria for community growth, governance, and adoption. The announcement gives no date. The GitHub repository will also move out of the google organization as part of the transition.

2

gVisor's Linux kernel patches get upstreamed

Possible Resolves by End of 2027

Discussed by: The gVisor announcement, which notes kernel maintainers rejected patches because gVisor was Google-owned

The announcement says Linux kernel patches that improve gVisor performance exist internally at Google and other gVisor-using companies. They were rejected because gVisor was a wholly-owned Google project. With CNCF governance, these patches may now be accepted upstream.

3

A new hyperscaler offers gVisor-powered compute

Possible Resolves by End of 2028

Discussed by: The gVisor announcement, which notes only Google, DigitalOcean, and Modal sell gVisor-powered compute directly

The announcement says a large number of entities self-install gVisor on non-Google hyperscalers, but only a small subset sell it as a product. The donation aims to reduce governance risk that may have deterred direct integration. A new hyperscaler offering gVisor-powered compute would signal broader adoption.

Historical Context

2 moments from history that rhyme with this story — and how they unfolded.

2015

Kubernetes donated to CNCF (2015)

Google donated Kubernetes, its container orchestration system, to seed the newly formed Cloud Native Computing Foundation in 2015. Kubernetes had grown from Google's internal Borg system.

Then

Kubernetes became the industry standard for container orchestration, with a large ecosystem built around it.

Now

The donation became a template for moving corporate projects to neutral governance.

Why this matters now

The gVisor announcement explicitly draws this parallel, noting Kubernetes grew into the industry standard after its CNCF donation.

2015

Node.js moves to Node.js Foundation (2015)

Node.js, the server-side JavaScript runtime created by Ryan Dahl in 2009, moved from Joyent's control to the newly formed Node.js Foundation in 2015. The foundation provided neutral governance for the project.

Then

Node.js continued to grow under foundation governance, becoming one of the most widely used server-side runtimes.

Now

The foundation model became common for open source projects seeking neutral governance.

Why this matters now

Like gVisor, Node.js moved from single-company control to neutral foundation governance to enable broader community participation.

Sources

(2)