Re:GVisor: Linux-Compatible Sandbox
by delduca on Wednesday October 16, 2024 @12:23PM
(#41860955)
Does anyone know if gVisor is used outside of Google? I know Firecracker is.
[ Parent
| on HN ]
It's easy to run containers with different runtimes, so using gVisor (as "runsc") with Kubernetes or Docker is a simple matter of installing it and using the appropriate flags when starting a container.
gVisor is nice when you're working with untrusted inputs, like ffmpeg transcode containers.
It is used by grist (https://www.getgrist.com) to sandbox Python formulas.