https://github.com/nanovms is another unikernel attempt to solve the security problem, is an actual VM runnable on type1 hypervisor.

In contrast, gvisor, needs ptrace or kvm.

Both nanovms and gvisor aim to provide an abstraction through emulated system calls.