# seL4 microkernel

58 Hacker News commenters recommended seL4 microkernel and 5 criticized it, November 2025 to November 2026. It was recommended in 12 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Formally verified microkernel with machine-checked proofs and capability-based isolation, recommended for security-critical systems. Its main caveat is that it runs little existing software.

## Why people recommend it

- Formally verified with machine-checked proofs (7 comments): "The SeL4 team has written extensive documentation of how they did it. They also opensourced their kernel implementation, with correctness proofs for the whole thing." ([source](https://news.ycombinator.com/item?id=49812839)) "Check out seL4 and CompCert for real-world examples of complex software proven correct and used in industry." ([source](https://news.ycombinator.com/item?id=48728244)) "provides machine-checked proofs for an OS kernel that no execution can reach a state that is undefined" ([source](https://news.ycombinator.com/item?id=50187166))
- Strong isolation through capabilities (5 comments): "And, unlike a demonstrated shitty browser sandbox, seL4 formally guarantees isolation. Capabilities cannot be forged." ([source](https://news.ycombinator.com/item?id=50289894)) "your network stack and whatever else can be split off into isolated processes which talk over capabilities" ([source](https://news.ycombinator.com/item?id=49810741)) "Systems with capability-based security, such as seL4[0], do not suffer from this category of problem." ([source](https://news.ycombinator.com/item?id=47932148))
- Small kernel, smaller attack surface (4 comments): "Security is risk mitigation, and a reduced surface area makes it easier for everyone to focus on the remaining areas." ([source](https://news.ycombinator.com/item?id=49432307)) "Microkernels make these sort of problems much harder to exploit because each component is small and easier to audit." ([source](https://news.ycombinator.com/item?id=48058924)) "It is an important and serious kernel, but a very small one and a very simple one" ([source](https://news.ycombinator.com/item?id=49922433))
- Influences microkernel design and future systems (3 comments): "Honestly the biggest insight I take from sel4 is that we can get improvements in security by breaking up a large program into isolated pieces." ([source](https://news.ycombinator.com/item?id=49824522)) "My best compliment to seL4 is that it has raised the bar and simultaneously paved the way for future generations of advances." ([source](https://news.ycombinator.com/item?id=45882519)) "When seL4 came around, it helped me rethink microkernel architecture and limitations" ([source](https://news.ycombinator.com/item?id=48131669))

## What people warn about

- Hard to use and work with (2 comments): "sel4 is a radically different strategy that is as much of a pain in the ass as it's powerful" ([source](https://news.ycombinator.com/item?id=46166557)) "it pretty hard to work with specially if you want any kind of dynamic system" ([source](https://news.ycombinator.com/item?id=46663976))
- Performance cost from isolation (2 comments): "SeL4 kernel has latency guarantees based on similar proofs (at considerable cost)" ([source](https://news.ycombinator.com/item?id=46528404)) "performance degrades due to the sheer number of cross-boundary interactions" ([source](https://news.ycombinator.com/item?id=45871020))

## Alternatives hackers recommend

- [FreeBSD](https://hackerapproved.com/p/freebsd.md): 335 recommend
- [Oberon System 3](https://hackerapproved.com/p/oberon-system-3.md): 25 recommend
- [Genode OS](https://hackerapproved.com/p/genode.md): 14 recommend
- [Ironclad OS](https://hackerapproved.com/p/ironclad.md): 12 recommend
- [PebbleOS](https://hackerapproved.com/p/pebbleos.md): 8 recommend

## Cite as

Hacker Approved, "seL4 microkernel", https://hackerapproved.com/p/sel4/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).