gVisor on ECS

Google’s gVisor exists to provide a true sandbox for your Docker containers. It replaces runc, the default Docker runtime which recently had a serious vulnerability 1.

In theory gVisor is a drop-in replacement for runc, but does it actually work with Amazon ECS?

Read More

Serverless Plugins

Here are some cool plugins for Serverless: serverless-log-forwarding I want a log solution that is both durable and has powerful search capabilities CloudWatch Logs is reliable, but that’s about it. You need something that you can search and analyse logs with, and this plugin is the bridge between Lambda and your log aggregation system. serverless-plugin-aws-alerts Building a full suite of alerts for a Serverless application is not simple, but this gives you a big head start.

Read More