I'd like to start by setting up gVisor on the Beta Cluster for the function-{evaluator,orchestrator} services that are running under Docker.
The gVisor packages are available here: https://gvisor.dev/docs/user_guide/install/#install-from-an-apt-repository
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| aptrepo: add gvisor repository | operations/puppet | production | +41 -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T316706 Run user-submitted code under gVisor | |||
| Resolved | Joe | T316879 Make gVisor packages available via apt.wikimedia.org |
Change 839597 had a related patch set uploaded (by Giuseppe Lavagetto; author: Giuseppe Lavagetto):
[operations/puppet@production] aptrepo: add gvisor repository
Change 839597 merged by Giuseppe Lavagetto:
[operations/puppet@production] aptrepo: add gvisor repository
$ docker run --rm -ti --entrypoint /bin/bash --user root docker-registry.wikimedia.org/buster root@aaf61aa41436:/# echo 'deb http://apt.wikimedia.org/wikimedia buster-wikimedia thirdparty/gvisor' > /etc/apt/sources.list.d/gvisor.list root@aaf61aa41436:/# apt-get update [...] root@aaf61aa41436:/# apt-get install runsc Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: runsc
Change 839632 had a related patch set uploaded (by Jforrester; author: Jforrester):
[mediawiki/services/function-evaluator@master] [WIP] Install gVisor on our test and run images
@Joe the Wikifunctions Beta Cluster instance is running Bullseye -- could you also pull it in there?