Yes Yes Golang Yes No No None or KVM Google Kata+qemu Yes Yes Golang, C Yes Yes Yes KVM Hyper Firecracker+ Firecracker- containerd No Yes Rust, Golang Yes No No KVM Amazon Nabla+runnc Yes No C, Golang Pod Sandbox Agent gVisor Guest Kernel O C I Gofer container container Pod Sandbox Sentry KVM/ptrace File Access OCI Implementation Limited Syscall H O S T K E R N E L Comparison Solution Easy to customize to fit various network, storage and OS environments • High-performance: Leverage KVM capability Advantage of Rust-VMM • Google implements the first Rust-based light VMM called CrosVM