summaryrefslogtreecommitdiffhomepage
path: root/content/docs/includes/install_gvisor.md
blob: 404f3f5b4c9aa04f2967918300f253e35c915c65 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
The easiest way to get `runsc` is from the [latest nightly
build][latest-nightly]. After you download the binary, check it against the
SHA512 [checksum file][latest-hash].

Older builds can also be found here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc`

With corresponding SHA512 checksums here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc.sha512`

**It is important to copy this binary to a location that is accessible to all
users, and ensure it is executable by all users**, since `runsc` executes itself
as user `nobody` to avoid unnecessary privileges. The `/usr/local/bin` directory is
a good place to put the `runsc` binary.

```bash
(
  set -e 
  wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
  wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
  sha512sum -c runsc.sha512
  chmod a+x runsc
  sudo mv runsc /usr/local/bin
  sudo chown root:root /usr/local/bin/runsc
)
```

[latest-nightly]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
[latest-hash]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
[oci]: https://www.opencontainers.org