{"slug": "cloud-hypervisor", "name": "Cloud Hypervisor", "category": "infra", "category_name": "Infrastructure and DevOps", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.807, "rising": 0.35, "first": "2026-04-06", "latest": "2026-10-14", "why": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 0, 1, 0, 0, 1, 0, 0, 1], "listed": true, "loved": [], "caveat": "", "short_quote": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/cloud-hypervisor/cloud-hypervisor", "official_url": "https://www.cloudhypervisor.org", "pricing": "", "aliases": ["Cloud Hypervisor", "cloud-hypervisor"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 801298369, "item_id": 50081148, "url": "https://news.ycombinator.com/item?id=50081148", "by": "vishnukool", "date": "2026-10-14", "stance": "recommend", "quote": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "excerpt": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "context": "", "use_case": "", "switched_from": "", "story": "Launch HN: Agent37 (YC F26) \u2013 Low-cost agent sandboxes for running agents"}, {"id": 785219140, "item_id": 49076196, "url": "https://news.ycombinator.com/item?id=49076196", "by": "teravor", "date": "2026-07-27", "stance": "recommend", "quote": "roll a CLI solution using any of gvisor, cloud-hypervisor, firecracker, muvm (libkrun)", "excerpt": "this has already been done. runsc (gvisor) Kata Containers (virtualization) both drop in replacements for runc (default OCI runtime) there are others too. one based on libkrun : https://github.com/containers/crun/blob/main/krun.1.md and these are just runc replacements. with some minor scripting you can roll a CLI solution using any of gvisor, cloud-hypervisor, firecracker, muvm (libkrun).", "context": "", "use_case": "", "switched_from": "", "story": "Securing Services with Rootless Containers"}, {"id": 762627268, "item_id": 47664204, "url": "https://news.ycombinator.com/item?id=47664204", "by": "benswerd", "date": "2026-04-06", "stance": "recommend", "quote": "For hardware virtualized machines it much harder but you can do it via:", "excerpt": "Self hosting can be doable for constant small/medium size workloads You can handroll a lot with: https://github.com/nestybox/sysbox?tab=readme-ov-file https://gvisor.dev https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via: https://github.com/firecracker-microvm/firecracker/ https://github.com/cloud-hypervisor/cloud-hypervisor Freestyle/oth", "context": "", "use_case": "hardware-virtualized sandboxes", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["hardware-virtualized sandboxes"], "compared": [{"slug": "firecracker", "name": "Firecracker", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "gvisor", "name": "gVisor", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 758804145, "item_id": 47425259, "url": "https://news.ycombinator.com/item?id=47425259", "by": "shayonj", "date": "2026-03-18", "stance": "neutral", "quote": "Cloud Hypervisor couldn't use MAP_PRIVATE for this because it breaks VFIO/vhost-user bindings", "excerpt": "Cool project. +1 on userfaultfd for the multi-node path. Wrote about how uffd-based on-demand restore works wrt to my Cloud Hypervisor change [1] if you are curious. I think the the main things to watch are fault storms at resume (all vCPUs hitting missing pages at once) and handler throughput if you're serving pages over the network instead of local mmap. I think its less likely to happen when you fork a brand new V", "context": "", "use_case": "", "switched_from": "", "story": null}], "threads": [{"url": "https://news.ycombinator.com/item?id=50059096", "title": "Launch HN: Agent37 (YC F26) \u2013 Low-cost agent sandboxes for running agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49021024", "title": "Securing Services with Rootless Containers", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47663147", "title": "Launch HN: Freestyle: Sandboxes for AI Coding Agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47412569", "title": "item 47412569", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {"recommend": 1}}, "quotes": [{"id": 801298369, "item_id": 50081148, "url": "https://news.ycombinator.com/item?id=50081148", "by": "vishnukool", "date": "2026-10-14", "stance": "recommend", "quote": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "excerpt": "We use gvisor and cloud hypervisor depending on the use case, which manages these things pretty well by default.", "context": "", "use_case": "", "switched_from": "", "story": "Launch HN: Agent37 (YC F26) \u2013 Low-cost agent sandboxes for running agents"}, {"id": 785219140, "item_id": 49076196, "url": "https://news.ycombinator.com/item?id=49076196", "by": "teravor", "date": "2026-07-27", "stance": "recommend", "quote": "roll a CLI solution using any of gvisor, cloud-hypervisor, firecracker, muvm (libkrun)", "excerpt": "this has already been done. runsc (gvisor) Kata Containers (virtualization) both drop in replacements for runc (default OCI runtime) there are others too. one based on libkrun : https://github.com/containers/crun/blob/main/krun.1.md and these are just runc replacements. with some minor scripting you can roll a CLI solution using any of gvisor, cloud-hypervisor, firecracker, muvm (libkrun).", "context": "", "use_case": "", "switched_from": "", "story": "Securing Services with Rootless Containers"}, {"id": 762627268, "item_id": 47664204, "url": "https://news.ycombinator.com/item?id=47664204", "by": "benswerd", "date": "2026-04-06", "stance": "recommend", "quote": "For hardware virtualized machines it much harder but you can do it via:", "excerpt": "Self hosting can be doable for constant small/medium size workloads You can handroll a lot with: https://github.com/nestybox/sysbox?tab=readme-ov-file https://gvisor.dev https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via: https://github.com/firecracker-microvm/firecracker/ https://github.com/cloud-hypervisor/cloud-hypervisor Freestyle/oth", "context": "", "use_case": "hardware-virtualized sandboxes", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}]}