undefined | Better HN

0 pointscodethief1y ago0 comments

That sounds like a category error? An alternative OCI runtime is not what GP asked for.

0 comments

2 comments · 1 top-level

Using gVisor to run a Docker container creates a sandboxed execution environment inside the Docker container

I am still not following. Where was OP talking about wanting to nest containers?

Slightly off-topic, on the topic of nesting containers: Have you run gVisor successfully in such a setup? I seem to remember using gVisor to run the child container is not that easy and gVisor might still need some syscalls(?) that the parent container might not allow. I might be misremembering, though.

j / k navigate · click thread line to collapse