An Upstream-First Approach to Application Virtualization

Learn how to implement application virtualization in desktop operating systems through this 20-minute conference talk from XDC 2025. Explore Spectrum, a Linux-based desktop OS that enhances security by isolating each application and driver into lightweight virtual machines while maintaining an integrated desktop experience. Discover how this upstream-first approach leverages existing freedesktop.org technologies including Wayland security contexts, XDG Desktop Portals, and virtio-gpu to create a more cohesive compartmentalized system than previous virtualization efforts. Examine how various freedesktop.org interfaces, even those not originally designed for virtualization, can be repurposed to enable sustainable desktop compartmentalization. Gain insights into potential future accommodations for virtualization in freedesktop.org protocols and implementations, and participate in discussions about advancing virtualization-based security in desktop environments.