What google/gvisor shipped
Generated by FoxPlug from public activity — not affiliated with Gvisor.
Week of September 14, 2026
What shipped
- gVisor 20260914.0 released with improvements to CPU reporting, seccomp performance, and systemd compatibility. Release
- Fixed FUSE file handling to properly support opening files larger than 2GiB by checking O_LARGEFILE flags before masking. Pull request #13957
- Added AT_PLATFORM to the initial auxiliary vector to match Linux behavior and improve application compatibility. Pull request #14816
- Added STATX_ATTR_MOUNT_ROOT reporting from statx to support systemd 60+ requirements. Pull request #14764
- Optimized seccomp initialization by lazily constructing precompiled programs instead of eagerly materializing all bytecode at startup. Pull request #14674
- Increased setsockopt maximum option length from 32KB to 1MB to support larger socket option payloads. Pull request #14600
- Fixed GPU device file restoration to create nvproxy device files on restore regardless of remap metadata availability. Pull request #14525
- Added writable net.ipv4.conf.all.route_localnet sysctl support for enabling martian loopback traffic routing. Pull request #14625
- Fixed tmpfs checkpoint handling to preserve binary and empty xattrs in filesystem checkpoints. Pull request #14793
- Added support for NVIDIA driver version 615.71.09 in nvproxy. Pull request #14751
Why it matters
Release 20260914.0 brings significant compatibility improvements, particularly for systemd integration and GPU support. Performance optimizations in seccomp and fixes to file handling make gVisor more practical for real-world workloads requiring large files and complex socket operations.
Changelog entry
- release: gVisor 20260914.0 Release
- fuse: check O_LARGEFILE before masking it out of the open flags Pull request #13957
- Add AT_PLATFORM to the initial auxv Pull request #14816
- Report STATX_ATTR_MOUNT_ROOT from statx Pull request #14764
- seccomp: Lazily construct precompiled seccomp programs Pull request #14674
- syscalls/linux: raise setsockopt maxOptLen to 1MB Pull request #14600
- Create nvproxy device files on restore regardless of remap metadata Pull request #14525
- proc, tcpip: add writable net.ipv4.conf.all.route_localnet Pull request #14625
- tmpfs: preserve binary and empty xattrs in filesystem checkpoints Pull request #14793
- nvproxy: Add support for NVIDIA driver version 615.71.09 Pull request #14751
- Fix clock overflow recovery and watchdog timing Pull request #14357
- Synchronize shared key permissions Pull request #14365
- runsc symbolize: Delegate symbolization to sentry binary Pull request #14718
- Cap host CPU deep idle states for GPU sandboxes on impacted CPUs Pull request #14526
- Reproduce host errno for unreadable RDMA netdev sysfs attributes Pull request #14567
- Fix races in shim version queries and RPC shutdown Pull request #14358
gVisor 20260914.0 is out. Better FUSE file support, systemd compatibility, GPU restoration, and seccomp performance improvements.
gVisor 20260914.0 released with major improvements: FUSE now handles files >2GB, seccomp initialization 8ms faster per sandbox, systemd 60+ compatibility via STATX_ATTR_MOUNT_ROOT, GPU device restoration fixes, and socket options up to 1MB. Check the changelog for full details.