We now make sure that the requested domain is a valid domain based on the
custom domain and project ID settings before redirecting.
PiperOrigin-RevId: 548859553
This CL does the following:
- Add `<strong>emphasis</strong>` on the important keywords for each panel
- Mention "LLM-generated code" as code that can be sandboxed in gVisor
- Change "GPU support" header to "GPU & CUDA support"
- Add PNG transparency to images where it was missing
- Remove link to raw image file on architecture diagram
- Adjust panel icon size
- Adjust `<h2>` margins in panels
- Small CSS cleanups
PiperOrigin-RevId: 548764864
getpid-ptrace-vs-systrap-unopt.svg was a copy of getpid-ptrace-vs-native.svg.
Rename image so previously cached image isn't reused.
PiperOrigin-RevId: 528499423
This page does not document anything new, but it aims to be a
central document to list all the steps and considerations
necessary to run gVisor in a production environment.
This includes:
- How to make the decision to use sandboxing at all or not
(which security benefits sandboxing bring, how to think
about them).
- How to make the decision about which components to sandbox.
- What the security/performance tradeoffs are.
- How to minimize the performance impact.
- How to configure gVisor for best performance.
Also includes a crude comparative diagrams of various ways
to organize a typical production stack.
PiperOrigin-RevId: 466491023
Update header title and jumbotron with security platform info.
Add new benefits to index page reflecting use case value and adjust footer
logo to remove blur when scaled.
PiperOrigin-RevId: 461935696
Resize image 2021-12-02-flamegraph-figure2.png. Adjust
some paragraph and getpid performance tables.
Signed-off-by: Yong He <[email protected]>
Signed-off-by: Jianfeng Tan <[email protected]>
A blog about how Ant Group run gVisor in production at scale.
Signed-off-by: Jianfeng Tan <[email protected]>
Signed-off-by: Yong He <[email protected]>
This adds a new short tutorial on how to run Knative services in gVisor by
enabling the runtime class feature flag for Knative.
Fixes#3634
PiperOrigin-RevId: 374999528
Highlighting previously highlighted multiple items in the sidebar if the had
the same page name (not full url). This change simplifies this by adding the
highlight class in the jekyll template rather than javascript, and highlights
only the correct page.
PiperOrigin-RevId: 364931350
- Moves the id to the <tr> tag so that the page aligns properly when using an
anchor.
- Makes the syscall number a link to the anchor.
- Fixes some broken links to syscalls without man pages.
PiperOrigin-RevId: 353159903
Whether the variable was found is already returned by syscall.Getenv.
os.Getenv drops this value while os.Lookupenv passes it along.
PiperOrigin-RevId: 351674032
gvisor-containerd-shim is not compatible with containerd 1.1 or earlier.
Starting from containerd 1.2, shim v2 is the preferred interface.
PiperOrigin-RevId: 351485556
This further restricts the surface exposed only to artifacts
generated by the continuous integration system.
This change also installs appropriate root certificates, so
that objects can be fetched from https://storage.googleapis.com.
PiperOrigin-RevId: 350650197
Add redirects from any module package path to its corressponding
pkg.go.dev documentation. e.g., gvisor.dev/gvisor/pkg/sentry/kernel ->
https://pkg.go.dev/gvisor.dev/gvisor/pkg/sentry/kernel.
This is a handy way to get to documentation, also used by other vanity
domains, like golang.org/x/tools.
This allows us to link directly to profiling results from
the build results. The code uses the standard pprof http
server, exported from the Cloud Run instance.
PiperOrigin-RevId: 350440910
This splits the nogo rules into a separate configuration yaml file, and
allows for multiple files to be provided.
Because attrs cannot be passed down to aspects, this required that all
findings are propagated up the aspect Provider. This doesn't mean that
any extra work must be done, just that this information must be carried
through the graph, and some additional starlark complexity is required.
PiperOrigin-RevId: 339076357
