Compared with ordinary containers (which share the host kernel), gVisor has a smaller isolation surface and greater difficulty of escape, but some programs that depend on special syscalls (such as certain GPU and nested virtualization scenarios) may fail to run, and I/O-intensive workloads also incur considerable overhead.