compare
crun vs gVisor
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | crun | gVisor |
|---|---|---|
| Language | C | Go |
| Licence | GPL-2.0 | Apache-2.0 |
| Stars | 4.1k | 20k |
| Latest | 1.30.1 | release-20260928.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 24 days between releases | about 7 days between releases |
| Active contributors | 21 commit authors on the default branch in the last 90 days | 49+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace runc. Alternatives to runc →
Drop-incrunOCI runtime written in C, used by Podman by default.
Drop-ingVisorOCI runtime that runs containers on a user-space kernel for isolation, at some cost in syscall speed.
crun
- 1.30.12026-09-25CVE-2026-84042: add a proper fix for it. The old version didn't include the correct patches.
- 1.302026-09-24CVE-2026-84042: prevent that rootful krun with passt can execute
- 1.29.12026-08-13linux: do not clobber the mount root mode for proc, sysfs and mqueue. A 1.29 regression copied the mountpoint directo…
- 1.292026-08-07linux: use the new mount API for more mount operations.
- 1.282026-05-27CVE-2026-47766: do not follow rootfs /dev symlinks. Open rootfs /dev with safe_openat before creating default or handl…
gVisor
- release-20260928.02026-09-30gVisor 20260928.0
- release-20260921.02026-09-23gVisor 20260921.0
- release-20260914.02026-09-16gVisor 20260914.0
- release-20260907.02026-09-11gVisor 20260907.0
- release-20260831.02026-09-04gVisor 20260831.0
crun
✓ signed The latest release, 1.30.1, carries a signature GitHub verified.
Loading the security report
gVisor
unsigned The latest release, release-20260928.0, carries no signature GitHub could verify.
Loading the security report