https://github.com/jonmosco/ansible-role-gvisor
Ansible Role: gVisor
https://github.com/jonmosco/ansible-role-gvisor
Last synced: 5 months ago
JSON representation
Ansible Role: gVisor
- Host: GitHub
- URL: https://github.com/jonmosco/ansible-role-gvisor
- Owner: jonmosco
- Created: 2022-02-22T21:33:51.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-02-23T14:00:57.000Z (over 4 years ago)
- Last Synced: 2025-12-13T08:59:37.930Z (8 months ago)
- Language: Jinja
- Size: 3.91 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# ansible-role-gvisor
**NOTE: This is a work in progress. Testing is still going on, so use at your
own risk.**
Ansible role to install and configure gVisor Container runtime:
gVisor is an application kernel, written in Go, that implements a substantial
portion of the Linux system surface. It includes an Open Container Initiative
(OCI) runtime called runsc that provides an isolation boundary between the
application and the host kernel. The runsc runtime integrates with Docker and
Kubernetes, making it simple to run sandboxed containers.
## Requirements
* Docker
* containerd
## Role Variables
```yaml
gvisor_download_url
```
## Dependencies
* docker runtime
```bash
sudo runsc install --runtime runsc-debug -- \
--debug \
--debug-log=/tmp/runsc-debug.log \
--strace \
--log-packets
```
## Example Playbook
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
```yaml
- hosts: k8s-nodes
roles:
- { role: jonmosco.gvisor }
```
## License
BSD
## Author Information
This role was created by Jon Mosco in 2022.