microsoft/litebox

Health v2 · maintenance only

Adoption not part of the score

3204 stars · 180 forks observed · 2026-10-22

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

LiteBox is a security-focused library OS written in Rust that drastically reduces the interface exposed to the host, minimizing attack surface. It supports both kernel- and user-mode execution and provides a nix/rustix-inspired interface that can be paired with various platform backends.

Use cases

• sandbox untrusted Linux applications on Linux
• run unmodified Linux programs on Windows
• run programs inside SEV-SNP confidential VMs
• execute OP-TEE trusted applications on Linux
• build isolated execution environments with a minimal host interface

When to choose

• you need to sandbox Linux binaries with a minimal attack surface
• you want a Rust-based library OS that works in both kernel and user mode
• you target confidential computing platforms like SEV-SNP or OP-TEE
• you need a Linux syscall compatibility layer on non-Linux hosts

When to avoid

• you need a fully stable, production-hardened OS with long-term API guarantees
• you need a general-purpose OS with broad device and filesystem support
• you are not comfortable adapting to frequent API changes during active development

Facets

library · maturity experimental

security security operating-systems developer-tools windows cross-platform rust library-os sandboxing kernel-mode user-mode confidential-computing tee linux-compatibility attack-surface-reduction operating-system virtualization isolation linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="microsoft/litebox")