gVisor Users [Public]

Forgot to mention that you'd also need to add MAP_SHARED|MAP_FIXED_NOREPLACE to syscall filters:

So you want: [ sandboxed app ] <--> [ httptap proxy ] <--> [ some other endpoint ] All

Thank you. Is the list you sent platforms that gVisor runs on top of? My main concern was the

Hi Justin, There is not an upcoming scheduled community meeting. We tend to schedule those as needed

I believe this was figured out on GitHub. On Mon, Oct 14, 2024 at 12:10 PM 'Kevin Krakauer'

Can you be more specific as to which type of tracing you are referring to? It's a highly

In collaboration with the Freedom of the Press Foundation, gVisor is now integrated in Dangerzone,

Thanks for all this information. > The idea was to provide a runsc command which can output a

Hi Kevin, Thanks for a quick reply. I am probably looking in the wrong place. I am using netstack

You may have full read permission, but do you also have execute (+x) permission on `/bin/echo`? If

Not really; `runsc usage` is the API that `runsc` offers to read this data from the host, similar to

Hi gVisor users, As of GKE version 1.29.2-gke.11080000 and later, GPUs are supported in GKE Sandbox (

Hi, I am the author of the change. Some details are not visible since it is an internal issue, I will

Hi Jonathon, The invoker of the FUSE_OPEN operation is here: https://github.com/google/gvisor/blob/

I will respond on https://github.com/google/gvisor/issues/10316. It is an issue in gVisor. The first

Hi Alan, sorry for the late reply. There's no prebuilt feature to support this, but it looks like

It seems the reason is we're running createRuntime inside the newly created user namespace, I

Hi gVisor users and developers! I am thrilled to announce a new tool by the vHive serverless

Searching for the "Could not handshake: Error in the pull function" error online shows that

Consider trying IntelliJ/Goland with the Bazel plugin. It supports cross references in Bazel projects

The specific way containers/processes get memory depends on the platform (systrap or KVM), but

Zach and Etienne, Thanks much for your response. I wanted to see some perf data like what is listed

Thanks, Andrei. Currently, I am interested in bare metal. So, looks like KVM is the choice there. In

You will need to provide more details than that in order to figure out the problem. Please see the

Hi, IIUC, containerd delegates the checkpoint/restore work to the underlying container runtime (like

I didn't look in detail, but most likely this is due to a difference in implementation as to how

If you want to avoid syscalls entirely, you can try creating a packet socket on a loopback device

Hello, gVisor performance is a complex topic and the results vary a lot depending on many factors.

Thanks, all good! On Monday, October 9, 2023 at 10:58:12 PM UTC-4 Ayush Ranjan wrote: Hi Jonathon,

Do you happen to know if the Nvidia's kernel-mode driver apply any checks on the DMA? Is there a