ENTERPRISE PLATFORM FOR VMs AND CONTAINERS · ON-PREMISE · SINCE 2018

TVirt©

VMs and containers, one platform designed and developed in Italy.

Native cluster and federation with no single point of failure, security by design and a licensing model that takes 10 minutes to explain. Built for those who cannot afford compromises: defence, public administration, large enterprises.

Download the brochure (PDF)Let’s talk
MADE IN ITALYVMs AND CONTAINERSCLUSTER AND FEDERATIONNO VENDOR LOCK-INONE LICENCE, ALL INCLUDED
THE RIGHT QUESTION

Who controls the platform your infrastructure runs on, and what happens the day you decide to leave? TVirt© guarantees data sovereignty and the right to change vendor.

THE PLATFORM

Why Trantor® TVirt©

Acquisitions, repricing and end-of-life platforms have redrawn the market, and the convergence of VMs and containers has taken two directions: a Kubernetes that absorbs VMs, or a hypervisor that absorbs containers. Trantor® TVirt© is the second form: VMs and containers in the same operating model, around three guiding values: security, simplicity, reliability.

Cluster-native

The cluster is native: there are no standalone nodes; even a single node is in fact a cluster with one member. Clustering logic is built into the TVirt© servers.

Management plane built into the virtualization nodes: every node is self-sufficient and the configuration lives on a distributed store, with a local read-only replica on each node.

Cluster unreachable? VMs keep running, logins work on the replica and an emergency path guarantees the essential operations on the node.

Different engines, one platform: QEMU/KVM for virtual machines, Podman for OCI containers (Apps), LXC for system containers (CTs).

Standard operating base: AlmaLinux 10 on x86 or ARM servers.

Diagram: on the left the engine model, where the Engine + DB box, marked SPOF (single point of failure), is wired to three hosts; on the right TVirt cluster-first, where three nodes, each with store and replica, are linked to one another as peers.ENGINE MODELTVirt© · CLUSTER-FIRSTENGINE + DBSPOFhost 1host 2host 3node 1store + replicanode 2store + replicanode 3store + replica

Engine down: the fleet cannot be managed. No starts, migrations or snapshots.

Every node is a peer, for VMs and containers: no center to defend.

Secure by design and by default

SELinux and per-VM confinement: unprivileged user, seccomp sandbox, dedicated MCS labels.

UEFI, Secure Boot and a dedicated TPM 2.0 protect against several kinds of tampering, thanks to digitally signed bootloaders.

Virtual disk encryption with keys in the node keystore or on an external KMS; boot disks of the physical servers encrypted with LUKS2, with the key on the TPM.

Deny-by-default RBAC, granular permissions and an anti-enumeration system: what you cannot see is indistinguishable from what does not exist.

"SUDO mode" for destructive operations and a single audit trail for the whole platform, append-only and tamper-evident.

Write-only secrets: never returned by the API, rotated in one place only.

Installation from the TVirt© ISO and updates as files to upload through GUI, CLI or API, in air-gapped sites too.

Corporate single sign-on via OIDC/SAML/LDAP and multi-factor authentication (MFA).

THE PRODUCT PHILOSOPHY

«Some platforms grant every freedom, including the freedom to compromise the system. Others grant none. TVirt© grants full freedom of maneuver, while preventing you from compromising your own infrastructure.»

FEATURES

The heart of the platform: VMs

Virtual machines

Explicit hardware profiles (Windows / Linux / legacy), BIOS or UEFI firmware, Secure Boot, cloud-init and guest agent. VNC console with single-use tickets, snapshots (RAM included) and cloning in a matter of seconds.

Live migration

Pre-copy with auto-converge and explicit time limits; switchover with fencing on the store: never two executors of the same guest. Every failure rolls back cleanly, with the VM still running on the source node.

Storage

Local directories, NFS, CIFS/SMB and iSCSI/NVMe (over TCP as well as FibreChannel and RDMA), plus managed multi-cluster Ceph. Portable namespace, scanning and adoption of existing content, overcommit protection. Container volumes use the same backends, through CSI drivers.

Network

Manual bonds, VLANs and bridges, with checkpoints, rollback and reachability checks. Corporate fabric inventory to derive the network configuration automatically. Multi-node VXLAN overlay and trunk vNICs for tenants. The same network serves containers, IP-per-container.

Observability

Metrics designed for contention: cpu.ready (the equivalent of %RDY), PSI pressure, disk latencies. Native Prometheus export, live streaming every two seconds, built-in alerts. The same metrics and the same events cover VMs and containers.

API-first

OpenAPI 3.1 contract: the web interface and the CLI are pure clients of the same API. Dry-run everywhere, guaranteed idempotency; «tvirt apply» accepts the native format, Kubernetes YAML and Compose, with auto-detection.

DESIGNED FOR THE WORST CASE

High availability with hardware fencing: VMs restart automatically on healthy nodes and container workloads are rescheduled after fencing. Explicit operator attestations for lost storage and nodes (attestLost / attestDown), emergency cluster recovery with epoch fencing, declarative export and import of the whole configuration in NDJSON. No automatic destruction: bytes are deleted only by an explicit, logged decision.

COMPLETING THE PLATFORM

Built-in backup

Deduplication, encryption and immutability for VMs and containers, plus an automatic configuration checkpoint before every risky change.

Assisted migration

Importers for ESXi/vCenter and Proxmox, Docker Compose and Kubernetes / OpenShift manifests: everything is imported, with a warning on whatever is not supported.

Multi-cluster federation

Several clusters and several sites, a single overview to govern the distributed infrastructure.

FEATURES

Natively integrated containers

One platform for virtual machines, OCI containers and LXC system containers, in the same operating model. Compatible with the tooling you already use (Docker, Docker Compose, kubectl) without being yet another packaged Kubernetes. VMs remain first-class citizens: containers arrive in the same place, not in a separate cluster.

Orchestrated OCI containers

Podman runtime: native pods, rootless by default. A single replicated workload type (no Pod / ReplicaSet / Deployment matryoshka) with probes, rolling updates, affinity and rescheduling on node failure with fencing. Tags are resolved to digests by the control plane: every rollback stays referenceable.

LXC system containers

A distinct resource type, with a virtual-machine lifecycle: templates, snapshots and clones inherited from the hypervisor world. It shares scheduler, network and storage with OCI workloads, without forcing a single abstraction.

Your tooling already works

Docker Engine API socket with the official docker CLI reused untouched, Compose v2, Portainer, CI and Testcontainers; the official kubectl on a documented, versioned API profile. The compatibility matrix is public and corpus-tested in CI.

One operating model

One backup, one RBAC, one network and one audit trail for VMs and containers. The "scope" is the multi-tenant boundary: quotas, DNS and isolated API views. Secrets encrypted at rest and registry credentials distributed by the control plane, never per node in the clear.

Images and registries

Images as resources: pinned digests, multi-arch, pinned or tracking policy for automatic rolling when the digest changes. Cluster pull-through cache as an internal mirror, sync to and from any registry with skopeo, smart garbage collection.

Network and services

IP-per-container on the same overlay as the VMs (VXLAN / EVPN). Network services with VIPs, L4 load balancing and internal DNS: Compose by-name discovery coincides with DNS. NetworkPolicy for tenant segregation.

KUBERNETES, WHEN YOU REALLY NEED IT

Those who need 100% of the Kubernetes API get it: complete Kubernetes clusters run as VMs on TVirt©. The native API profile is declared for what it is: a documented subset of the Kubernetes API, and whatever is not supported is rejected with a targeted message, never silently lost. No lock-in, not even on Kubernetes.

HOW IT WORKS

Technical overview: part 1

The cluster with no center, up close: how the physical nodes are governed, what happens when something breaks, and what foundations everything rests on.

High availability built into the nodes

HA lives on the TVirt© nodes, with no engine on a VM and no external components: standard quorum rules and advanced fencing via BMC Redfish. When a node fails, VMs restart on the healthy nodes and containers are rescheduled; lost storage and nodes are declared through explicit operator attestations (attestLost / attestDown), and emergency recovery uses epoch fencing.

Physical nodes, managed from the dashboard

Network configuration, time synchronization, powering servers on and off and rebooting them: all from the TVirt© dashboard. Nodes are installed from ISO and rolled out in bulk via BMC Redfish; the network link to the UPS performs a graceful shutdown of nodes and VMs when the power fails.

Diagnostics and single points of failure

An advanced diagnostics system pinpoints problems, and single-point-of-failure detection reasons by domain: does VM X have a SPOF at rack level? The configuration lives on a distributed store with a local read-only replica on every node: if the store stops responding, VMs keep running and the emergency path guarantees the essential operations.

The platform foundation
Operating systemAlmaLinux 10 (or RHEL 10 with the customer’s subscription), immutable and digitally signed rootfs images; FIPS mode available
Node protectionDisk encrypted with LUKS2 bound to the TPM 2.0; root account locked, with an emergency key kept in a safe; the only accessible Linux user is read-only, for diagnostics
Architecturesx86 and ARM, RISC-V experimental; mixed clusters; containers can restart on a different architecture if the OCI/rootfs images are multi-arch
EnginesQEMU/KVM for VMs · Podman for OCI containers (Apps) · LXC for system containers (CTs)
StorageInternal Ceph for hyperconvergence; external over iSCSI/NVMe on TCP, FibreChannel, FCoE, RDMA/RoCE, as well as NFS and CIFS/SMB; the same backends serve containers through CSI drivers
UpdatesUpdates as files to upload through GUI, CLI or API, in air-gapped sites too
THE NUMBERS, BEFORE SIGNING

Supported maximums (nodes per cluster, VMs and vCPUs per node) and HA restart objectives are stated in writing in the scope of supply, as for the whole Trantor® range.

HOW IT WORKS

Technical overview: part 2

Hundreds of VMs, containers and nodes stay governable only if the organization is in the product: virtual datacenters, roles, tags and a placement engine that reasons about failures.

Virtual datacenters, roles and tags

vDCs have quotas and bounded resources, and nest in a hierarchical order. Permissions follow a granular, deny-by-default role system, one permission per action, the same for VMs and containers. Tags label any resource: that is what makes managing hundreds of VMs, containers and nodes scalable.

Placement by requirements and preferences

VMs declare requirements and preferences on server tags: VM X runs only on nodes with ram_type=ddr5. GPUs too are assigned by class through tags, not by specific device («at least two enterprise-medium GPUs»), so a VM or a container can restart on a different but compatible server; sharing technologies such as NVIDIA GRID are supported.

Two licensing models

You choose the model that best describes your use: the number of physical cores in the cluster, or the number of VMs powered on at the same time. In both cases everything is included, with no separate modules.

TVIRT© PROXIMITY: HA THAT REASONS ABOUT FAILURES

The placement engine takes into account the resources available on the nodes, the placement and affinity/anti-affinity rules, and failure-resistant scenarios: it does not start a VM if the total load could not be sustained should nodes fail. «Expendable» VMs can be shut down or not restarted after a failure, to give priority to the ones that are not.

Federation

Several clusters talk to each other and share resources, with a single overview of the distributed infrastructure.

Disaster recovery

Asynchronous disk replication to another cluster: the secondary site is ready to restart without external engines.

HOW IT WORKS

Technical overview: part 3

Lifecycle, virtual hardware, snapshots and migration: everything a VM can do, and how it does it without surprises.

Lifecycle, snapshots and clones

Power on, power off, pause/resume and reboot, with the kinds of shutdown recognized and distinguished (crash, shutdown from inside the VM, server down). Cold and hot snapshots of RAM, of all disks, of the TPM state and of the EFI varstore, with write quiescing and, if that fails, a fallback to a pause of a few milliseconds. Full clones or instant linked clones.

Live migration across vendors, and from Intel to AMD

Pre-copy with auto-converge and explicit time limits; smart CPU baseline management guarantees maximum granularity and performance even between servers from different vendors, or between Intel and AMD. The switchover goes through fencing on the store — never two executors of the same guest — and every failure rolls back cleanly. Disks migrate live to another storage backend.

Templates and TVirt© QuickDeploy

Templates create VMs in seconds; QuickDeploy uses cloud-init on Linux and sysprep/cloudbase-init on Windows for automatic configuration and mass deployment.

The virtual hardware
ProfilesWindows, Linux, Legacy: the profile decides the buses and the virtual and para-virtual devices assigned to the VM
Hardware schemasVersioned (e.g. TVIRT6-VM1): hardware enumeration and management stable over time; manual upgrade to the next schema to take advantage of new features, checking that the VM copes with the change
FirmwareLegacy BIOS, UEFI, or UEFI + Secure Boot + TPM 2.0; custom OVMF firmware for UEFI VMs
Disks and ISOsVirtIO SCSI (Windows/Linux) or IDE (Legacy); hot-plug of disks and ISOs; live resizing; shared read-only or read-write disks for guest clusters such as Windows Server Failover Cluster
vCPU and vRAMTopology, NUMA, placement and hierarchical quotas; static or dynamic RAM, huge pages; nested virtualization inside the VM
ConsoleWeb console with single-use tickets; the CLI also exposes a local VNC server for VNC clients
HOW IT WORKS

Technical overview: part 4

The network as a cluster service, and the two compatibility layers that make the tools you already use work from day one.

From physical bridges to the fabric

VMs connect through physical bridges to the external network or through isolated overlay networks inside TVirt©, with support for SR-IOV cards. Node configuration is derived from the corporate fabric: you describe how the switches are configured and how the nodes are physically connected to them, and TVirt© generates the network configuration taking VLANs, LACP and MLAG into account. The built-in IPAM assigns addresses to VMs and containers; advanced firewalling protects VMs, containers and nodes.

Containers: Apps, CTs and builds

Apps run on Podman, CTs on LXC, and the platform can create OCI images and rootfs templates and build OCI containers. «tvirt apply» accepts the native format, Kubernetes YAML and Compose with auto-detection.

Network services delivered by the cluster

DHCP for VMs and containers

DNS authoritative

Load balancer and reverse proxy

Gateway with NAT and static routes

NTP, relaying other servers or on the local clock

VPN WireGuard and OpenVPN

TVirt© VMWCompat

Compatibility layer with the VMware vSphere APIs: existing scripts, Ansible playbooks and Terraform, govc and PowerCLI keep working, pointed at TVirt©.

TVirt© KubeCompat

Compatibility layer with the Kubernetes APIs: kubectl, scripts, Ansible and Terraform talk to the cluster as if it were Kubernetes.

HOW IT WORKS

Technical overview: part 5

Data protection, memory that stays encrypted even while running, and the products of the range that plug into TVirt©.

Native backup, and the one you already use

Full and incremental backups with job scheduling, native for VMs and containers, with deduplication, encryption and immutability; external backup software remains supported. The whole configuration is exported and re-imported declaratively in NDJSON.

Configuration checkpoints

Every risky change is preceded by an automatic configuration checkpoint, and checkpoints can also be created by hand: rolling back to a previous state is a routine operation, not an emergency.

Automation and integration

OpenAPI 3.1 contract: the web interface and the CLI are pure clients of the same API, with dry-run everywhere and guaranteed idempotency. Those who already automate with vSphere or Kubernetes tools go through the VMWCompat and KubeCompat layers.

CONFIDENTIAL COMPUTING

VM memory can stay encrypted even while running, with AMD SEV-SNP and Intel TDX: the data is protected even from whoever administers the host.

THE RANGE AROUND TVIRT©

Trantor® TVStor

The storage of the range: managed Ceph or MultiSCSI SAN on standard protocols (iSCSI/NVMe, NFS, SMB) that TVirt© consumes natively.

Trantor® Imago

The console’s SSO and MFA (OIDC, SAML, LDAP) can rely on Imago: centralized access policies and audit for the platform too.

Trantor® per l’HPC

The range’s supercomputing bundle delivers its compute and AI machines with TVirt© itself: same platform, same operating model.

MIGRATION AND ANTI-LOCK-IN EXIT

Migration to TVirt©, and back

A plan to migrate your infrastructure to a new platform is judged by the promises kept and by the emergency exit. TVirt© documents both: every import declares what is supported and what is not, and migrating away from TVirt© is documented and possible too, thanks to the open formats and standards it adopts.

Your «docker VMs», absorbed

Every fleet has VMs running Docker Compose, outside every policy: no application-level backup, unmonitored, invisible to audit. TVirt© brings them in without touching your files: a Docker-compatible socket, a Compose importer faithful to the specification and a conversion report that declares what goes through and what does not. Swarm stacks come in through the same door.

Lift & drain from OpenShift and Kubernetes

First the lift: the cluster moves onto TVirt© VMs, without touching the workloads. Then the drain, at your own pace: a manifest importer with strict validation and faithful defaulting, never a silent drop, conversion of DeploymentConfig and ImageStream, and «tvirt assess-migration», which reads the namespaces read-only and produces the convertibility report: auto-convertible percentage, blockers, resources tied to operators.

From VMware and Proxmox, without taking risks

TVirt© exposes a vSphere-compatible API (SOAP and REST) verified with real govc: the tools you already use (govc, PowerCLI, Terraform, Ansible) create, clone and migrate VMs onto TVirt© during the transition. VMs arrive through V2V conversion, registries through skopeo sync with digests preserved. One piece at a time, never everything at once, to reduce risk.

THE DOCUMENTED EXIT
ASSETFORMAT / PROTOCOLEXIT PROCEDURE
Disks and virtual machinesQCOW2 · QEMU/KVM domain, virtio, guest agentDirect attach to any KVM
Container imagesOCI registry, pinned digestsSync to any registry: digests stay valid
Container workloadsNative declarative resourcesExport to Docker Compose and Kubernetes, with any loss declared in the report
VolumesCeph, standard CSI driversSame formats and procedures for VMs and containers
NetworkVXLAN / EVPN / BGPInteroperable with third-party equipment
State and configurationDeclarative JSON5Versionable in the customer’s Git, not only in the TVirt© store
THE QUESTION WE RAISE OURSELVES, NOT ONE WE ENDURE

«What if TVirt© became the next lock-in?» The answer is not a promise: it is structural. Open formats wherever your data lives, export that does not require the vendor’s consent and, where the project calls for it, contractual commitments on continuity and perpetual licences (through escrow).

POSITIONING

TVirt© and the alternatives

TVirt© and the alternatives: part 1

Twenty-two alternatives in four parts: no fear of comparison. This first part covers the historical hypervisors and their direct heirs. Every row with the alternative’s advantages and what every customer should ask themselves.

PLATFORMCONTROL PLANELICENSING MODELWORTH CONSIDERING
Trantor® TVirt©
Trantor® · Italy
Symmetric cluster, VMs and containers: every node self-sufficient, distributed store, no SPOFOne licence per physical core: everything included, use and support, multiples of 12 monthsSecurity, sovereignty and predictable costs; runs on x86 and on ARM; direct support from the development team; native VDI with VDesk
VMware vSphere / VCF
Broadcom · non-EU
vCenter as the central management pointSubscription only, per core, in bundles (VCF / VVF), with minimums per CPUThe market’s historical reference point, with price list and channel thoroughly reworked after Broadcom; TVirt© exposes a compatible API: the transition starts from the tools you already use
Hyper-V · Azure Local
Microsoft · non-EU
Hyper-V in Windows Server; its evolution Azure Local, managed via Azure ArcIncluded in Windows Server (Datacenter for unlimited VMs); Azure Local on a monthly fee per core, through AzureThe obvious alternative in Microsoft shops, but the direction is the vendor’s cloud: management, licensing and billing go through Azure
XenServer
Cloud SW Group · non-EU
Xen hypervisor, XenCenter managementPremium per socket or in the Citrix bundle; activation only through Citrix CloudRelaunched by CSG but pulled back into the Citrix/VDI perimeter; the licence anchored to the vendor’s cloud weighs in isolated environments, and those who still run it face the same choice as the VMware refugees
XCP-ng
Vates · France (EU)
Xen hypervisor; management through the Xen Orchestra applianceOpen source, support per host (Vates)The other European route, with Veeam on the way and a clean commercial model; but no containers in the model, storage on DRBD and increasingly rare Xen skills
Proxmox VE
Proxmox · Austria (EU)
No engine: Corosync quorum and the pmxcfs file systemOpen source (AGPL); tiered subscription supportMaximum freedom, but hardening and operational guardrails stay your responsibility and OCI container support is experimental; TVirt© ships a verified baseline and container orchestration as standard
oVirt · RHV · OLVM
Community · Oracle (non-EU)
Central engine (Java + PostgreSQL) above the hostsoVirt free; RHV at end of support (08/2026); OLVM on an Oracle subscriptionA line under reduced maintenance; the Red Hat heir is OpenShift. The Russian forks (zVirt, Brest) inherit its limits, with extra jurisdictions on top
HOW TO READ THE COMPARISON

The useful comparison is not the feature list: it is the model. Who controls the code and in which jurisdiction, how you pay in year three, how much it costs to leave. It holds for every row of this part, and for the sixteen in the three that follow.

TVirt© and the alternatives: part 2

Six routes that share one premise: first you adopt Kubernetes or OpenStack, then you virtualize.

PLATFORMCONTROL PLANELICENSING MODELWORTH CONSIDERING
OpenShift Virtualization
Red Hat / KubeVirt · non-EU
VMs as Kubernetes resources, dedicated control plane; since January 2025 also the VM-only SKU (Virtualization Engine), per socket pairRed Hat subscription, per coreNatural if OpenShift is already in house; for virtualization alone it is a leap in complexity, and TVirt©’s lift & drain covers the transition
OpenStack
OpenInfra Foundation
A suite of coordinated services (Nova, Neutron, Cinder, ...)Open source; commercial distributions and support sold separatelyDesigned for large-scale private clouds and dedicated teams, packaged by Mirantis too; TVirt© is a single product, with a single API
Apache CloudStack
Apache · ShapeBlue (UK)
Open multi-hypervisor IaaS orchestrator, with a management serverOpen source (Apache); third-party commercial supportMature and loved by providers: native multi-tenancy and metering, simpler than OpenStack; for the enterprise it remains a cloud to assemble and operate
Virtuozzo VHI
Switzerland · non-EU
Turnkey packaged OpenStack, with controller nodesPerpetual or subscription; designed for service providersThe turnkey OpenStack for hosters and CSPs: native billing and white-label; for the enterprise it is still OpenStack, and the storage is proprietary
OpenNebula
Spain · EU
Open cloud orchestrator on KVM, lightweight control planeOpen source + enterprise support (OpenNebula Systems)Twenty years of history and a flagship of the European sovereign cloud (IPCEI, AI factory); more orchestrator than platform: storage and containers remain to be assembled
SUSE Virtualization
SUSE · EU
HCI on Kubernetes: KVM via KubeVirt, Longhorn storage (Harvester)SUSE subscription, integrated with RancherEuropean, open and growing; but underneath there is Kubernetes (RKE2, Longhorn) even when the console hides it: one more world to operate
THE THREAD RUNNING THROUGH THE PLATFORMS

They are all legitimate choices when the world they bring along is already in house: each asks you to learn its way of operating in order to get to VMs. TVirt© goes the other way: you have the VMs, and containers arrive where they already are, with no second multi-tenant cluster to govern.

TVirt© and the alternatives: part 3

Here are the alternatives to TVirt© that, like us, converge compute, storage and network into a single piece of software. The difference lies in who controls the system.

PLATFORMCONTROL PLANELICENSING MODELWORTH CONSIDERING
Nutanix AHV
Nutanix · non-EU
Distributed across the nodes (CVM); Prism Central for advanced managementSubscription per core, in editions (Starter · Pro · Ultimate)Solid HCI but a proprietary ecosystem (AOS storage, qualified hardware); TVirt© uses standard servers and storage
Arcfra AECP
Singapore · SmartX · non-EU
Complete KVM stack, AOC central consoleAnnual subscription per core, in four editions with add-onsThe closest in form, with claimed top-tier performance and DR; IP and engineering derived from SmartX (China), exit not documented
HPE VM Essentials
HPE · non-EU
KVM (HVM) managed by the Morpheus platformPer socket (~$600 a year at list price), also bundled with HPE serversThe OEM’s answer, aggressive on price and convenient for ProLiant buyers; a young platform, and the center of gravity remains the hardware vendor
Scale Computing
non-EU
Integrated KVM HCI (HyperCore); management in the nodes, Fleet Manager in the cloudTiered subscription, per core and node, through partnersSimplicity as a philosophy, perfect for edge and SMBs, now with Veeam too; limited enterprise depth and EU presence
VergeIO
non-EU
VergeOS: hypervisor, storage and network in a single codebase («ultraconvergence»)Per node, everything includedA radical idea and straightforward pricing, with virtual datacenters and immutable snapshots; a young company, strong with US SMBs and education, thin EU ecosystem
Platform9
non-EU
KVM with a SaaS management plane (self-hosted and air-gapped possible)Subscription per coreFounded by VMware veterans, a polished experience and vJailbreak migration; but the default is the control plane in the vendor’s cloud, to be weighed for sovereignty
THE LESSON OF THE APPLIANCES

Converging compute, storage and network into a single piece of software is the right direction: the hardware, yes, but control of the cluster must stay with whoever owns it, not with the vendor, its price list and its qualified hardware.

TVirt© and the alternatives: part 4

Here are the lesser-known, more niche alternatives.

PLATFORMCONTROL PLANELICENSING MODELWORTH CONSIDERING
Canonical MicroCloud
Canonical · UK
LXD cluster: KVM VMs and system containers, with MicroCeph and OVNOpen source + Ubuntu Pro supportThe closest philosophical cousin, with VMs and system containers on Ceph; strong in Ubuntu shops, but no OCI orchestration and a community split by the Incus fork
Sangfor HCI
China · non-EU
Full-stack HCI with integrated network securityCommercial; an aggressive anti-VMware push on TCOA Shenzhen giant with over 60 branches, EMEA included, and Gartner mentions; for EU public bodies and regulated sectors, jurisdiction is the question that comes before the demo
ZStack · H3C · Inspur
China · non-EU
KVM cloud platforms of the Chinese marketCommercialThe rest of the Chinese field, widespread in Asia and in the ecosystem’s catalogs; for the EU the same yardstick applies: jurisdiction, references and local support to be verified
Huawei FusionCompute
Huawei · China, non-EU
The Fusion suite’s virtualization layer; FusionCube for HCICommercial, tied to the Huawei ecosystemHuawei’s weight and a complete supply chain; in the EU it brings along the regulatory and geopolitical context you already know

Positioning summary as of July 2026, from public sources. Every platform cited is a valid product in its own context of use; trademarks belong to their respective owners.

THREE QUESTIONS TO ASK EVERY VENDOR
  1. 1.

    «Who controls the code and the roadmap, and in which jurisdiction?»

    TVirt© answers in writing.

  2. 2.

    «Beyond today’s discount: what will year three cost me, between editions and renewals?»

  3. 3.

    «If I decided to leave you, how complex would it be to migrate VMs and containers?»

WHEN TVIRT IS THE NATURAL CHOICE

Critical infrastructure

Defence, public administration and classified environments: air-gapped, FIPS on RHEL 10, tamper-evident audit.

Real sovereignty

Platform, roadmap and support in Italy: no dependence on decisions taken overseas.

Predictable costs

One licence per core with everything included: the TCO can be worked out and defended in 10 minutes.

COMMERCIAL MODEL

One licence. Zero lock-in.

One licence. Everything included.

No Standard, Advanced or Enterprise editions. No add-ons to buy separately, no «unlockable» features: every customer receives the same, complete product. The quote can be read and defended in an audit in 10 minutes.

Usage licence and support
updates and support included
Price per physical core
transparent, verifiable sizing
Term in multiples of 12 months
1, 2, 3+ years: planning with no surprises
Not included: Editions and tiersNot included: Paid add-onsNot included: Pay-per-use featuresNot included: Surprises at renewal

Freedom to leave, freedom to choose

Open formats and protocols: qcow2, NFS / CIFS / iSCSI, digest-addressed OCI registries, standard guest agent

Declarative export of configuration (NDJSON) and workloads (k8s / Compose), public documented API: data and automations stay yours

Made in Italy, for real

Designed and developed entirely in Italy. A short supply chain: the people who support you are the people who wrote the code, with a single point of contact for product, roadmap and support.

A concrete answer to the technological sovereignty and confidentiality requirements of defence, public administration and large groups: no dependence on licensing decisions taken overseas, support and documentation in Italian.

Native VDI with Trantor® VDesk

For virtual workstation projects, TVirt© integrates natively with VDesk, the VDI platform of the Trantor® family: virtual desktops directly on the hypervisor, the same Italian supply chain and a single point of contact for infrastructure and workstations.

TOGETHER

Works with the rest of the ecosystem

TVirt© + VDesk

Virtual desktops directly on the hypervisor: the same Italian supply chain and a single point of contact for infrastructure and workstations.

Discover VDesk >
TVirt© + TVStor

The storage of the range, on standard protocols that TVirt© consumes natively.

Discover TVStor >
TVirt© + Imago

The console’s SSO and MFA on Imago: centralized access policies and audit.

Discover Imago >
TVirt© + Trantor® for HPC

The range’s supercomputing bundle delivers its compute and AI machines with TVirt© itself.

Discover Trantor® for HPC >

Explore the whole ecosystem >

Last updated: 10 August 2026. The contents of this page follow the brochure of that revision.

THE NEXT MOVE

See it in action.

Request a guided demo or a proof of concept in your environment: on-premise, air-gapped or in a lab.

e-mailAll contacts