Package abi describes the interface between a kernel and userspace.

Package atomicbitops provides extensions to the sync/atomic package.

Package binary translates between select fixed-sized types and a binary representation.

Package bitmap provides the implementation of bitmap.

Package bits includes all bit related types and operations.

Package bpf provides tools for working with Berkeley Packet Filter (BPF) programs.

Package buffer provides the implementation of a non-contiguous buffer that is reference counted, pooled, and copy-on-write.

Package cleanup provides utilities to clean "stuff" on defers.

Package compressio provides parallel compression and decompression, as well as optional SHA-256 hashing.

Package context defines an internal context type.

Package coretag implements core tagging.

Package coverage provides an interface through which Go coverage data can be collected, converted to kcov format, and exposed to userspace.

Package cpuid provides basic functionality for creating and adjusting CPU feature sets.

Package erofs provides the ability to access the contents in an EROFS [1] image.

Package errors holds the standardized error definition for gVisor.

Package eventchannel contains functionality for sending any protobuf message on a socketpair.

Package eventfd wraps Linux's eventfd(2) syscall.

Package fd provides types for working with file descriptors.

Package fdchannel implements passing file descriptors between processes over Unix domain sockets.

Package fdnotifier contains an adapter that translates IO events (e.g., a file became readable/writable) from native FDs to the notifications in the waiter package.

Package flipcall implements a protocol providing Fast Local Interprocess Procedure Calls between mutually-distrusting processes.

Package fspath provides efficient tools for working with file paths in Linux-compatible filesystem implementations.

Package fsutil contains filesystem utilities that can be shared between the sentry and other sandbox components.

Package gohacks contains utilities for subverting the Go compiler.

Package goid provides the Get function.

Package hostarch contains host arch address operations for user memory.

Package hostos contains utility functions for getting information about the host OS.

Package hosttid provides the Current function.

Package linewriter provides an io.Writer which calls an emitter on each line.

Package lisafs (LInux SAndbox FileSystem) defines the protocol for filesystem RPCs between an untrusted Sandbox (client) and a trusted filesystem server.

Package log implements a library for logging.

Package marshal defines the Marshallable interface for serialize/deserializing go data structures to/from memory, according to the Linux ABI.

Package memutil provides utilities for working with shared memory files.

Package metric provides primitives for collecting metrics.

Package p9 is a 9P2000.L implementation.

Package pool provides a trivial integer pool.

Package prometheus contains Prometheus-compliant metric data structures and utilities.

Package rand implements a cryptographically secure pseudorandom number generator.

Package refs defines an interface for reference counted objects.

Package ring0 provides basic operating system-level stubs.

Package safecopy provides an efficient implementation of functions to access memory that may result in SIGSEGV or SIGBUS being sent to the accessor.

Package safemem provides the Block and BlockSeq types.

Package seccomp provides generation of basic seccomp filters.

Package secio provides support for sectioned I/O.

Package sighandling contains helpers for handling signals to applications.

Package sleep allows goroutines to efficiently sleep on multiple sources of notifications (wakers).

Package state provides functionality related to saving and loading object graphs.

Package sync provides synchronization primitives.

Package syncevent provides efficient primitives for goroutine synchronization based on event bitmasks.

Package syserr contains sandbox-internal errors.

Package tcpip provides the interfaces and related types that users of the tcpip stack will use in order to create endpoints used to send and receive data over the network stack.

Package unet provides a minimal net package based on Unix Domain Sockets.

Package urpc provides a minimal RPC package based on unet.

Package usermem governs access to user memory.

Package waiter provides the implementation of a wait queue, where waiters can be enqueued to be notified when an event of interest happens.

Package xdp provides tools for working with AF_XDP sockets.