Open-sourcing gVisor, a sandboxed container runtime | Google Cloud Blog

Open-sourcing gVisor, a sandboxed container runtime Containers have revolutionized how we develop, package, and deploy applications. However, the system surface exposed to containers is broad enough that many security experts don't recommend them for running untrusted or potentially malicious applications. A growing desire to run more heterogenous and less trusted workloads has created a new inter

[prototechno]

#eLV勉強会

[mergyi]

VMとDocker Containerの中間という感じかな

[hiromichinomata]

"The runsc runtime is interchangeable with runc, Docker's default container runtime"

[tkmoteki]

興味深い Google Cloud Platform Blog: Open-sourcing gVisor, a sandboxed container runtime

[kazuhooku]

仮想化ソフトウェアがGoで書かれる時代

[progrhyme]

コンテナをサンドボックス環境で実行するgVisorがOSSに。多くのシステムコールが実装され、大抵のコンテナは動く

[deeeet]

👍👍👍👍

[launcher]

何それ... | a gVisor sandbox gets its own kernel and set of virtualized devices