bottlerocket-os / bottlerocket-os/bottlerocket
investigate gVisor support
Open
area/kubernetes
area/security
status/icebox
type/enhancement
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
We've heard from customers that they're interested in [gVisor](https://github.com/google/gvisor) support for sandboxing containers.
Some areas to investigate:
- [ ] disk footprint of solution
- [ ] potential for integration into settings API
- [ ] support for primary architectures (x86_64 and aarch64)
- [ ] performance overhead
- [ ] interoperability with SELinux
Contributor guide
Assessment
This issue has not been assessed yet.