Microsoft has released the first tagged version, v0.1, of its open-source Library OS project, LiteBox. The system is built using the Rust programming language and is designed to enhance security by minimizing the interface between applications and the host environment.
The project, which was first introduced in February 2026, utilizes a Library OS model that separates interfaces into two categories. The north-facing interface provides POSIX system calls, while the south-facing interface connects the system to host environments such as Linux, Windows, or specialized hardware.
LiteBox is intended for confidential computing and supports execution within protected encrypted memory regions on hardware featuring AMD SEV-SNP. It also offers integration with OP-TEE and allows for running unmodified Linux applications on Windows, though the current Windows runner is limited to x86-64 architecture.
Unlike container solutions like Google gVisor or Amazon Firecracker, LiteBox aims to reduce overhead through its specific architecture. Microsoft notes that the project remains in active development, meaning APIs and interfaces are subject to change, and no performance benchmarks have been released.
