gVisor on ECS


Google’s gVisor exists to provide a true sandbox for your Docker containers. It replaces runc, the default Docker runtime which recently had a serious vulnerability 1.

In theory gVisor is a drop-in replacement for runc, but does it actually work with Amazon ECS?

Read More