crosvm

crosvm is a free, open-source virtual machine monitor written in Rust. Developed for ChromeOS, it runs Linux and Android guest systems in sandboxed environments and is also used in TerminalApp on Android, Cuttlefish, and Windows. Its Rust crosvm_control library supports programmatic interaction, and the build generates a C/C++ compatible header. Supported CPU architectures are x86_64, aarch64, and riscv64. The project lists KVM, Gunyah, GenieZone, and Halla for Linux or Android, and WHPX and HAXM for Windows. Virtio device support covers networking, storage, graphics, audio, filesystems, console, RNG, ballooning, vsock, TPM, and video. Block storage formats include raw, qcow2, zstd, and Android sparse; virtio-GPU can provide 2D and 3D acceleration through virglrenderer, gfxstream, or vulkano. Each virtual device runs in its own Minijail sandbox by default, with syscall policies and other isolation measures. Linux hosts require kernel 4.14 or newer with KVM support. Getting crosvm involves cloning its source repository and building with Cargo.

crosvm offers a broad set of virtual devices and host options, with sandboxing applied to each device by default. Linux setup depends on KVM and a sufficiently recent kernel, and some documented features remain experimental.

crosvm suits developers and teams building or running Linux and Android guests in sandboxed virtual machines. Linux users need a kernel version of at least 4.14 with KVM support.

Overview

crosvm is a virtual machine monitor for running Linux and Android guests, with host options spanning Linux, Android, and Windows. It suits developers and platform teams who can build and configure their own VM tooling. Its per-device sandboxing and broad virtio support make it capable; the source-build workflow and host requirements make it a poor fit for anyone seeking a ready-to-use desktop app.

Key features

crosvm runs each virtual device in its own Minijail sandbox by default, with syscall policies intended to block unwanted calls. Linux namespaces, seccomp filters, and dropped capabilities add layers to that isolation. This design is a strong fit for teams that want device-level containment, though it still depends on compatible host support and does not make setup automatic.

The virtio device range covers networking, block storage, GPU, audio, filesystems, console, random number generation, ballooning, vsock, TPM, and video. Block storage handles raw, qcow2, zstd, and Android sparse formats, while GPU support offers 2D and 3D acceleration through virglrenderer, gfxstream, or vulkano. That breadth helps teams accommodate varied guest workloads without limiting crosvm to a narrow VM role.

For automation, the Rust crosvm_control library offers programmatic control alongside the command line, and the build generates a C/C++ compatible header. Supported CPU architectures are x86_64, aarch64, and riscv64. Snapshots and nested virtualization are supported, but live migration is not, which matters for operators planning to move running workloads between hosts.

crosvm was developed for ChromeOS to run Linux and Android guests and is also used in TerminalApp on Android, Cuttlefish, and Windows. That history points to platform and development use, rather than a consumer-first VM experience.

Pricing

crosvm is free and open source under the BSD-3-Clause license. Its crosvm plan costs nothing. There are no paid tiers to weigh against a free cap; instead, users take on the work of obtaining the source and building it with Cargo. The Linux build guide also describes a development container.

Platforms

crosvm supports Linux, Android, and Windows hosts, with Linux and Android guest operating systems. On Linux, it requires kernel 4.14 or newer with KVM support, and some devices have additional host requirements. Hypervisor options include KVM, Gunyah, GenieZone, and Halla for Linux or Android, plus WHPX and HAXM for Windows. The available hypervisor therefore depends on the host environment, and Linux users without KVM support cannot meet the stated baseline.

Getting started means cloning the source repository and building with Cargo, a reasonable route for developers but extra friction for someone who just wants to create a desktop VM. crosvm offers a public issue tracker, Matrix chat, announcements, and a developer mailing list for support and project updates.

Who it's for

crosvm is best suited to developers and platform teams building or operating Linux and Android guest environments, especially where per-device isolation, broad virtio coverage, or programmatic control matters. Its use in ChromeOS, TerminalApp, Cuttlefish, and Windows reflects that platform-oriented role. Users who want a graphical desktop manager or a packaged VM workflow should look elsewhere.

Pros and cons

• Pros: Each virtual device runs in its own Minijail sandbox by default, with syscall restrictions and additional isolation mechanisms.
• Pros: Broad virtio device support, multiple block-storage formats, and accelerated 2D and 3D graphics cover a wide range of guest needs.
• Pros: Free, open-source software with a Rust control library and generated C/C++ compatible header for integration.
• Cons: Source cloning and a Cargo build add setup work compared with a packaged desktop application.
• Cons: Linux requires kernel 4.14 or newer with KVM support, and some devices have additional host requirements.
• Cons: SCSI, video, shared host directories through virtio-pmem, and snapshotting are marked experimental or highly experimental, so they are less dependable choices for established workflows.
• Cons: Live migration is not supported, limiting options for moving running VMs between hosts.

Alternatives

Readers comparing virtualization tools can browse Hypervisor Software. Choose Proxmox VE if a freemium option across Linux, self-hosted, web, and Windows platforms better fits your environment. UTM is the alternative to consider for iOS or macOS; its free open-source version has no automatic updates, while the Mac App Store option costs $9.99, paid once.

Cloud Hypervisor is another free, open-source VMM for Linux and self-hosted use. Firecracker offers a free, Apache 2.0-licensed VMM for Linux and self-hosted environments. For a Linux desktop-only application, consider GNOME Boxes. Harvester is a free, open-source option for Linux, self-hosted, and web environments. KVM is free, open-source virtualization software with its kernel component in mainline Linux and its userspace component in mainline QEMU. Multipass is a free option for launching prototype clouds locally on Linux, macOS, or Windows, with host requirements that vary by operating system.

Verdict

Choose crosvm if you need a free, adaptable monitor for Linux or Android guests and value device-level sandboxing, broad virtio support, and programmatic control. Its main appeal is the combination of isolation and flexibility across supported hosts. Look elsewhere if you need a polished desktop workflow, live migration, or experimental devices as dependable parts of a production setup.