cvisor-cli
cvisor CLI
cvisor runs a command — or an interactive shell — inside a lightweight,
in-process Linux sandbox. It intercepts and virtualizes syscalls from
userspace with the seccomp user-notifier, giving each run a virtualized
filesystem (a copy-on-write overlay over the host) and network/resource controls
without a VM or a separate service. It's meant for untrusted or LLM-generated
code: a Docker/gVisor alternative with millisecond sandbox lifecycle.
The in-process sandbox needs a Linux kernel. On Linux it runs directly.
On macOS the same commands work transparently: the CLI provisions a reusable
bsdkrun microVM named cvisor-sandbox (from the cVisor image, running
cvisord inside) and drives it over gRPC — see "macOS" below. From any host you
can also use remote mode (--remote) to drive a specific cvisord daemon,
or cvisor ui to open the web UI against a daemon's GraphQL endpoint.
For the full flag list of every command, read references/cli-reference.md.