gVisor improves performance with root filesystem overlay. It is used in production at Google to run untrusted workloads securely. Runsc (run sandbox container) is compatible with Docker and Kubernetes and runs containers in a sandbox. GVisor has made several improvements recently that help containerized applications run faster.

6m read time From opensource.googleblog.com
Post cover image
Table of contents
OverviewCostly Filesystem Access in gVisorContainer Root FilesystemRootfs Configuration BeforeOpportunity! Sandbox Internal OverlayHost-Backed OverlaySelf-Backed OverlayPerformance GainsConclusion

Sort: