External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-01 17:48:12 -03:30
Code Issues Packages Projects Releases Wiki Activity

gVisor: initial support for gVisor container runtime (#7661)

Browse Source 
* Docker/Containerd: move downloads urls to containerd-common

* gVisor: initial support for gVisor container runtime
This commit is contained in:
Cristian Calin
2021-06-21 15:18:51 +03:00
committed by GitHub
parent 3fe6dbb65c
commit 282a27a07c
20 changed files with 336 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
docs/gvisor.md Normal file
View File

@@ -0,0 +1,16 @@
# gVisor
[gVisor](https://gvisor.dev/docs/) is an application kernel, written in Go, that implements a substantial portion of the Linux system call interface. It provides an additional layer of isolation between running applications and the host operating system.
gVisor includes an Open Container Initiative (OCI) runtime called runsc that makes it easy to work with existing container tooling. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.
## Usage
To enable gVisor you should be using a container manager that is compatible with selecting the [RuntimeClass](https://kubernetes.io/docs/concepts/containers/runtime-class/) such as `containerd`.
Containerd support:
```yaml
container_manager: containerd
gvisor_enabled: true
```