On 15 January 2007, a GmbH from Weinstadt, Germany, released the code for the hypervisor it used with governments and banks. The product was called VirtualBox. Within a year it passed four million downloads; in February 2008, Sun bought Innotek; in January 2010, Oracle arrived. Nineteen years later, VirtualBox 7.2.16 (18 August 2026) is still the most common way to run Linux on Windows — and Windows on Linux — without paying for VMware.
Weinstadt, OS/2, and Connectix
InnoTek Systemberatung GmbH was founded in 1992 in Stuttgart/Weinstadt. Its original business was legacy systems: German companies stuck on OS/2 and IBM mainframes. Virtualization was the only way to avoid rewriting everything. Co-founder and director Achim Hasenmueller came from systems development at IBM. In 2001, Innotek fully entered virtualization: it co-developed Virtual PC and Virtual Server with Connectix, later bought by Microsoft. The “additions” code — shared clipboard, resizing the guest window — originated there, in Virtual PC, and reappeared in VirtualBox.
Its own hypervisor began around 2004, still closed source, already running in German authorities (SINA workstations still use VirtualBox today). No venture capital. Innotek lived on projects and commercial licenses.
January 2007: the leap to the GPL
The public version shipped on 15 January 2007, with advice from LiSoG (now Open Source Business Alliance). Dual license: the Open Source Edition (OSE) under GPLv2, and the full binary free for personal use and evaluation (PUEL), paid for commercial deployment. Windows and Linux 32-bit hosts at first; guests from DOS to OS/2, NetWare, Windows, and Linux.
Hasenmueller was direct: Innotek was too small to compete with VMware's marketing. Opening the code was the only way for the product to exist outside Germany. In 2007, the company earned seven figures with free VirtualBox. By February 2008, more than four million downloads. Without the GPL, Sun would not even have noticed.
Sun: xVM VirtualBox
On 12 February 2008, Sun announced the acquisition (it closed on day 20). Price undisclosed — “not material to EPS.” Jonathan Schwartz was riding the open source wave: MySQL had cost US$ 1 billion the previous month. VirtualBox would complement xVM Server (Xen) in the datacenter and bring the Sun brand to developers' laptops, alongside OpenSolaris, OpenJDK, GlassFish, and NetBeans.
Hasenmueller called Sun a “dream partner.” The product became Sun xVM VirtualBox. Mac and OpenSolaris hosts left beta. The community followed. Two years later, Sun was gone.
Oracle, 2010: a base package and an Extension Pack
Oracle completed the Sun acquisition in January 2010. The name became Oracle VM VirtualBox. On 22 December 2010, 4.0 ended the OSE/PUEL split: the base product became GPLv2 (including installer, documentation, and drivers), and the closed components became the Extension Pack — USB 2/3, RDP, PXE, later disk encryption and NVMe. Anyone who only wants a Linux VM on the desktop uses the base. Anyone needing USB 3 and VRDP installs the pack (PUEL: personal, education, evaluation; commercial use is paid).
That licensing structure lasts to this day, with one adjustment: starting with 7.1 (September 2024), the base package is GPLv3, with a linking exception for CDDL and other incompatible licenses. The Extension Pack remains proprietary.
What VirtualBox taught on the desktop
Type 2 hypervisor: runs on top of the host OS, not in its place. VT-x / AMD-V when the processor allows it; through 6.0 there was still a software path (CSAM/PATM, a QEMU-style dynamic recompiler for real mode and BIOS). In 6.1 (December 2019), software-only support was dropped — a CPU with hardware virtualization became mandatory.
The rest is what made the blue cube a lab standard:
- Guest Additions: video, shared folders, integrated mouse, seamless mode.
- Native VDI disks, plus VMDK (VMware) and VHD (Microsoft). OVF/OVA since 2.2 (April 2009).
- RAM and disk snapshots. Cloning. VM groups. NAT, bridged, host-only, virtio-net.
- Public API (Python, Java, XPCOM, SOAP) and
VBoxManagefor anyone who does not want a GUI.
On Linux, KVM/QEMU is the kernel's “real” hypervisor — type 1, with KVM. VirtualBox never competed with that on servers. It competed on laptops: Windows host, Ubuntu guest, one click. That is why it survived Oracle, Sun's demise, and the container era.
From 5.0 to 7.2: Windows 11, ARM, GPLv3
- 5.0 (July 2015) — paravirtualization, USB 3, drag-and-drop.
- 6.0 / 6.1 (2018–2019) — nested virtualization (AMD, then Intel Broadwell+), virtio-scsi, Oracle Cloud import/export. End of software-only virtualization.
- 7.0 (10 October 2022) — proper Windows 11 support: emulated UEFI Secure Boot and TPM 1.2/2.0, IOMMU, whole-VM encryption, DirectX 11 / DXVK. Apple ARM still experimental.
- 7.1 (9 September 2024) — ARM virtualization on Apple silicon hosts (Linux and BSD guests). IPv6 NAT. Wayland clipboard. Base under GPLv3.
- 7.2 (14 August 2025) — Windows 11 ARM as a guest on ARM hosts (macOS or Windows 11). NVMe moved from the Extension Pack to the free binary. 3D on Mac ARM via DXMT. On 20 January 2026, 7.2.6 also opened disk/VM encryption, the VRDP server, and USB smartcard emulation — what had been closed became source.
7.2.10 (June 2026) gained initial support for Linux kernel 7.1. 7.2.16 shipped on 18 August 2026. Linux hosts on Oracle's website range from Ubuntu 22.04 to 26.04 (Resolute), Debian 11–13, Fedora, and openSUSE.
The Extension Pack, still
Full USB 2/3, Intel PXE, and whatever Oracle has not yet returned to the GPL remain in the pack. PUEL: one machine, noncommercial use. Companies buy Named Workstation. Confusing “free to download” with “I can pile it into the company lab” is the classic way to get a compliance surprise. The base binary, GPLv3, may be redistributed — the pack may not, without a contract.
Timeline
- 1992 — in Weinstadt, Germany, innotek starts the virtualization work that would lead to the product.
- 15 January 2007 — VirtualBox is released under the GPL: quality desktop virtualization becomes free software.
- 12 February 2008 — Sun Microsystems buys innotek; the product becomes xVM VirtualBox.
- 22 December 2010 — now under Oracle, the package splits into a free base and Extension Pack under a restricted license.
- 6.0 and 6.1 — redesigned interface and desktop performance improvements.
- 10 October 2022 — 7.0 brings TPM and Secure Boot, unlocking Windows 11 as a guest.
- 9 September 2024 — 7.1, with experimental ARM host support.
- 14 August 2025 — 7.2 consolidates the current line.
- 20 January 2026 — the core moves to GPLv3.
- 18 August 2026 — latest maintenance release in the series.
And Linux in all this
On servers, KVM. On the desktop, the cube still solves the cases libvirt makes tedious: Windows on Fedora, an old Debian on Ubuntu, a snapshot before updating the kernel. To take the VM elsewhere, OVA. To land on XCP-ng / XenServer, the path we documented in ova2xva — without xe.
The broader history — UNIX, the kernel, the desktop — is in The History of Operating Systems, The history of Linus Torvalds and Linux turns 35.
From Weinstadt to Redwood: VirtualBox remains the hypervisor that fits on a laptop. 7.2.16, GPLv3 in the base, ARM on Mac, kernel 7.1 in the guest. The blue cube still spins.