go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Note that the KVM platform is experimental 

PiperOrigin-RevId: 195043285
Change-Id: Ie76112eff61062e1a54894b3707201fd284be377
This commit is contained in:
Michael Pratt 2018-05-01 21:14:24 -07:00 committed by Shentubot
parent 43256efb08
commit 185233427b
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
README.md
View File

@ -142,12 +142,13 @@ mapping functionality. Today, gVisor supports two platforms:
executing host system calls. This platform can run anywhere that `ptrace`
works (even VMs without nested virtualization).
* The **KVM** platform allows the Sentry to act as both guest OS and VMM,
switching back and forth between the two worlds seamlessly. The KVM platform
can run on bare-metal or on a VM with nested virtualization enabled. While
there is no virtualized hardware layer -- the sandbox retains a process model
-- gVisor leverages virtualization extensions available on modern processors
in order to improve isolation and performance of address space switches.
* The **KVM** platform (experimental) allows the Sentry to act as both guest OS
and VMM, switching back and forth between the two worlds seamlessly. The KVM
platform can run on bare-metal or on a VM with nested virtualization enabled.
While there is no virtualized hardware layer -- the sandbox retains a process
model -- gVisor leverages virtualization extensions available on modern
processors in order to improve isolation and performance of address space
switches.
### Performance