gVisor has basically re-implemented most of syscall api, but only when the host is also Linux.