diff options
Diffstat (limited to 'docs/untrusted-workload-quickstart.md')
| -rw-r--r-- | docs/untrusted-workload-quickstart.md | 20 |
1 files changed, 6 insertions, 14 deletions
diff --git a/docs/untrusted-workload-quickstart.md b/docs/untrusted-workload-quickstart.md index 48ac6866b..a85eb5add 100644 --- a/docs/untrusted-workload-quickstart.md +++ b/docs/untrusted-workload-quickstart.md @@ -13,7 +13,7 @@ are using containerd 1.2, please consider using runtime handler.* - **containerd**: See the [containerd website](https://containerd.io/) for information on how to install containerd. ## Install - + ### Install gvisor-containerd-shim 1. Download the latest release of the `gvisor-containerd-shim`. See the @@ -21,28 +21,20 @@ are using containerd 1.2, please consider using runtime handler.* [embedmd]:# (../test/e2e/shim-install.sh shell /{ # Step 1/ /^}/) ```shell -{ # Step 1: Download gvisor-containerd-shim +{ # Step 1(release): Install gvisor-containerd-shim LATEST_RELEASE=$(wget -qO - https://api.github.com/repos/google/gvisor-containerd-shim/releases | grep -oP '(?<="browser_download_url": ")https://[^"]*' | head -1) wget -O gvisor-containerd-shim chmod +x gvisor-containerd-shim +sudo mv gvisor-containerd-shim /usr/local/bin/gvisor-containerd-shim } ``` -2. Copy the binary to the desired directory: - -[embedmd]:# (../test/e2e/shim-install.sh shell /{ # Step 2/ /^}/) -```shell -{ # Step 2: Copy the binary to the desired directory -sudo mv gvisor-containerd-shim-* /usr/local/bin/gvisor-containerd-shim -} -``` - -3. Create the configuration for the gvisor shim in +2. Create the configuration for the gvisor shim in `/etc/containerd/gvisor-containerd-shim.yaml`: -[embedmd]:# (../test/e2e/shim-install.sh shell /{ # Step 3/ /^}/) +[embedmd]:# (../test/e2e/shim-install.sh shell /{ # Step 2/ /^}/) ```shell -{ # Step 3: Create the gvisor-containerd-shim.yaml +{ # Step 2: Create the gvisor-containerd-shim.yaml cat <<EOF | sudo tee /etc/containerd/gvisor-containerd-shim.yaml # This is the path to the default runc containerd-shim. runc_shim = "/usr/local/bin/containerd-shim" |