POPULARITY
Yoshi Tamura, Product Manager at Google, joins us to talk about gVisor, a security focused container runtime used internally at Google and open sourced in 2018. Contributors is produced by Rackner, a consultancy focused on cloud native product development, DevSecOps, and Kubernetes - https://www.rackner.com/
Software applications running within a host operating system need to be isolated. Isolation prevents security vulnerabilities, such as one application accessing the memory of another. In modern cloud environments, a single physical host might be running multiple virtual machines on top of a hypervisor. Those virtual machines might be divided up into containers. The different The post gVisor Container Isolation with Michael Pratt and Yoshi Tamura appeared first on Software Engineering Daily.
RECENT UPDATES: Podsheets is our open source set of tools for managing podcasts and podcast businesses New version of Software Daily, our app and ad-free subscription service FindCollabs is hiring a React developer FindCollabs Hackathon #1 has ended! Congrats to ARhythm, Kitspace, and Rivaly for winning 1st, 2nd, and 3rd place ($4,000, $1000, and a The post gVisor: Secure Container Sandbox with Yoshi Tamura appeared first on Software Engineering Daily.
On this weeks Kubernetes Podcast, Adam and Craig talk to Nicolas Lacasse and Yoshi Tamura from Google Cloud about gVisor, a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It provides an isolation boundary between the application and the host kernel and integrates with Docker and Kubernetes, making it simple to run sandboxed containers. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod News of the week Microsoft announced four new features to AKS Microsoft and Red Hat announced the upcoming Managed OpenShift on Azure. Red Hat announced roadmap for CoreOS integration. Mirantis has announced “Virtlet”, which enables customers to run VMs as pods in a Kubernetes cluster. Kubernetes Ingress Controller is now available for Kong Techcrunch took a look at how Kubernetes is creating a broad ecosystem for startups. Links from the interview gVisor: GitHub Mailing list Announcement blog