Software:gVisor

From HandWiki
Short description: Linux software project developed by Google

remove this comment once confirmed by the reviewer. -->

gVisor
Gvisor-logo.png
Developer(s)Google
Initial release2 May 2018; 6 years ago (2018-05-02)
Repositorygithub.com/google/gvisor
Written inGo
Operating systemLinux
LicenseApache License 2.0
Websitegvisor.dev

gVisor is a container sandbox developed by Google that focuses on security, efficiency and ease of use.[1][2] gVisor implements around 200 of the Linux system calls in userspace, for additional security compared to Docker containers that run directly on top of the Linux kernel and are isolated with namespaces.[3][4] Unlike the Linux kernel, gVisor is written in the memory-safe programming language Go to prevent common pitfalls which frequently occur in software written in C.[5]

According to Google[6] and Brad Fitzpatrick,[7] gVisor is used in Google's production environment including the App Engine standard environment, Cloud Functions, Cloud ML Engine and Google Cloud Run.[8] Most recently, gVisor was integrated with Google Kubernetes Engine, allowing users to sandbox their Kubernetes pods for use cases like SaaS and multitenancy.[9]

References