KVM
vmhypervisoropen sourceThe Linux kernel's built-in , turning the kernel into a type-1 using CPU virtualization extensions.
documentedlinux-kvm.org ↗
KVM is the in-kernel Linux . Using hardware virtualization extensions (Intel VT-x / AMD-V), it lets a userspace , QEMU, Firecracker, Cloud , libkrun, run guest VMs each with their own kernel behind a hardware boundary. KVM provides the CPU/memory virtualization; the provides the device model. It is the foundation of essentially every Linux VM and tool, and the Linux equivalent of macOS's .framework.
Strengths
- Hardware-enforced VM boundary, each guest gets its own kernel
- In-kernel, mature, and near-native performance
- The base for Firecracker, Cloud Hypervisor, QEMU, and libkrun
Limitations
- Requires CPU virtualization extensions (bare metal or nested virt)
- A primitive, not a tool, needs a VMM on top to be usable
- Hypervisor 0-days and side channels remain the residual risk