crosvm

Overview

crosvm is a Rust virtual machine monitor for running Linux and Android guests in a sandboxed environment. It suits developers and platform teams building or operating guest workloads across Linux, Android, or Windows hosts. Its broad device support and isolation model make it a capable building block, but source-based setup and host requirements rule it out as a turnkey desktop VM.

Key features

By default, crosvm runs each virtual device in its own Minijail sandbox and applies syscall policies. Its wider isolation approach uses Linux namespaces, seccomp filters, and dropped capabilities. That device-level separation is a meaningful strength for teams concerned with limiting unwanted host interactions; it still depends on compatible host and device requirements.

Its virtio lineup spans networking, block storage, graphics, audio, filesystems, console, RNG, balloon, vsock, TPM, and video. Block storage accepts raw, qcow2, zstd, and Android sparse formats, while virtio-GPU offers 2D and 3D acceleration through virglrenderer, gfxstream, or vulkano. This range helps teams support varied guest needs without reducing crosvm to a narrow-purpose monitor.

For automation, the Rust crosvm_control library provides programmatic interaction alongside the command line, and the build generates a C/C++ compatible header. Supported architectures are x86_64, aarch64, and riscv64. Snapshots and nested virtualization are supported, but live migration is not, making crosvm a weaker fit for workflows that depend on moving running VMs between hosts. SCSI, video, shared host directories through virtio-pmem, and snapshotting are marked experimental or highly experimental, so those capabilities deserve caution in production plans.

The project was developed for ChromeOS to run Linux and Android guests and is also used in TerminalApp on Android, Cuttlefish, and Windows. Setup is aimed at builders: obtain the source repository and build with Cargo; the Linux guide also describes a development container. Linux hosts need kernel 4.14 or newer with KVM support, and some devices add further host requirements.

Pricing

crosvm is free: its open-source plan costs nothing and uses the BSD-3-Clause license. There is no paid tier or free trial to weigh against it. The trade-off is operational rather than financial: users build from source instead of choosing a packaged commercial plan.

Platforms

Host platforms are Linux, Android, and Windows, with Linux operation requiring a KVM-capable kernel at version 4.14 or newer. Guest support covers Linux and Android. The project lists KVM, Gunyah, GenieZone, and Halla for Linux or Android, plus WHPX and HAXM for Windows. The supported hypervisor and device combination therefore matters when choosing a host.

Who it's for

crosvm is best for developers and platform teams who need a configurable monitor for Linux or Android guests, value per-device sandboxing, or want to integrate VM control into Rust or C/C++ tooling. It is less suitable for people who want a point-and-click VM manager, packaged installation, live migration, or experimental features treated as settled production capabilities.

Pros and cons

• Pros: Per-device Minijail sandboxing, syscall policies, namespaces, seccomp filters, and dropped capabilities provide a layered isolation design.
• Pros: A wide virtio device set, multiple storage formats, and several GPU acceleration paths give guest builders flexibility.
• Pros: Free, open-source distribution avoids license fees, while the control library supports programmatic integration.
• Cons: Source cloning and a Cargo build add setup work compared with a ready-to-use VM application.
• Cons: Linux use requires a recent KVM-capable kernel, with additional host requirements for some devices.
• Cons: Snapshotting and several device or shared-directory features are experimental, and live migration is unavailable.

Alternatives

Proxmox VE is worth considering when a freemium option with a web platform matters more; its Premium plan is €1,100 a year, billed for a one-year subscription per occupied physical CPU socket. Multipass is a free alternative for prototype cloud launches locally and supports Linux, macOS, and Windows. QEMU is another free, open-source option for Linux, macOS, and Windows. Harvester may suit readers seeking a free, fully open-source option for self-hosted and web use.

UTM is an alternative for Apple platforms: its free open-source version is a GitHub download without automatic updates, while its Mac App Store version costs $9.99, paid once. VMware Workstation Pro is free for Windows or Linux hosts on 64-bit Intel or AMD PCs and requires no subscription or license key. ACRN Hypervisor is a free open-source reference hypervisor under the BSD 3-Clause license. Cloud Hypervisor is a free open-source VMM for Linux and self-hosted use. Readers comparing more products can browse Hypervisor Software.

Verdict

Choose crosvm if you need a free, source-buildable monitor for Linux or Android guests and value broad device support with sandboxing built into its design. Look elsewhere if you need a packaged desktop workflow, live migration, or dependable reliance on features still marked experimental.