blob: 5fe9fc1e83b0982e1621389b5913e905507d337c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
# Applications
gVisor implements a large portion of the Linux surface and while we strive to
make it broadly compatible, there are (and always will be) unimplemented
features and bugs. The only real way to know if it will work is to try. If you
find a container that doesn’t work and there is no known issue, please [file a
bug][bug] indicating the full command you used to run the image. You can view
open issues related to compatibility [here][issues].
If you're able to provide the [debug logs](../debugging/), the
problem likely to be fixed much faster.
## What works?
The following applications/images have been tested:
* elasticsearch
* golang
* httpd
* java8
* jenkins
* mariadb
* memcached
* mongo
* mysql
* nginx
* node
* php
* postgres
* prometheus
* python
* redis
* registry
* tomcat
* wordpress
## Utilities
Most common utilities work. Note that:
* Some tools, such as `tcpdump` and old versions of `ping`, require explicitly
enabling raw sockets via the unsafe `--net-raw` runsc flag.
* Different Docker images can behave differently. For example, Alpine Linux and
Ubuntu have different `ip` binaries.
Specific tools include:
| Tool | Status |
| --- | --- |
| apt-get | Working |
| bundle | Working |
| cat | Working |
| curl | Working |
| dd | Working |
| df | Working |
| dig | Working |
| drill | Working |
| env | Working |
| find | Working |
| gdb | Working |
| gosu | Working |
| grep | Working (unless stdin is a pipe and stdout is /dev/null) |
| ifconfig | Works partially, like ip. Full support [in progress](https://gvisor.dev/issue/578) |
| ip | Some subcommands work (e.g. addr, route). Full support [in progress](https://gvisor.dev/issue/578) |
| less | Working |
| ls | Working |
| lsof | Working |
| mount | Works in readonly mode. gVisor doesn't currently support creating new mounts at runtime |
| nc | Working |
| nmap | Not working |
| netstat | [In progress](https://gvisor.dev/issue/2112) |
| nslookup | Working |
| ping | Working |
| ps | Working |
| route | Working |
| ss | [In progress](https://gvisor.dev/issue/2114) |
| sshd | Partially working. Job control [in progress](https://gvisor.dev/issue/154) |
| strace | Working |
| tar | Working |
| tcpdump | [In progress](https://gvisor.dev/issue/173) |
| top | Working |
| uptime | Working |
| vim | Working |
| wget | Working |
[bug]: https://github.com/google/gvisor/issues/new?title=Compatibility%20Issue:
[issues]: https://github.com/google/gvisor/issues?q=is%3Aissue+is%3Aopen+label%3A%22area%3A+compatibility%22
|
