gvisorgvisor.dev/gvisor/runsc Directories

runsc command

Binary runsc implements the OCI runtime interface.

Directories

PathSynopsis
runsc/bootPackage boot loads the kernel and runs a container.
runsc/boot/filterPackage filter installs seccomp filters to prevent prohibited syscalls in case it's compromised.
runsc/boot/filter/configPackage config defines all syscalls the sandbox is allowed to make to the host.
runsc/boot/filter/dumpfilterdumpfilter dumps the seccomp-bpf program used by the Sentry.
runsc/boot/portforwardPackage portforward holds the infrastructure to support the port forward command.
runsc/boot/pprofPackage pprof provides a stub to initialize custom profilers.
runsc/boot/procfsPackage procfs holds utilities for getting procfs information for sandboxed processes.
runsc/cgroupPackage cgroup provides an interface to read and write configuration to cgroup.
runsc/cliPackage cli is the main entrypoint for runsc.
runsc/cmdPackage cmd holds implementations of the runsc commands.
runsc/cmd/metricserverThe metricserver binary is a separate binary that implements the 'runsc metric-server' subcommand.
runsc/cmd/metricserver/metricservercmdPackage metricservercmd partially implements the 'metric-server' subcommand.
runsc/cmd/nvproxyPackage nvproxy provides subcommands for the nvproxy command.
runsc/cmd/tracePackage trace provides subcommands for the trace command.
runsc/cmd/utilPackage util groups a bunch of common helper functions used by commands.
runsc/configPackage config provides basic infrastructure to set configuration settings for runsc.
runsc/consolePackage console contains utilities for working with pty consols in runsc.
runsc/containerPackage container creates and manipulates containers.
runsc/donationPackage donation tracks files that are being donated to a child process and using flags to notified the child process where the FDs are.
runsc/flagPackage flag wraps flag primitives.
runsc/fsgoferPackage fsgofer provides a lisafs server implementation which gives access to local files.
runsc/fsgofer/filterPackage filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.
runsc/hostsettingsPackage hostsettings provides suggestions or adjustments for host kernel settings to improve runsc performance, stability, or security.
runsc/metricserverPackage metricserver implements a Prometheus metric server for runsc data.
runsc/metricserver/containermetricsPackage containermetrics returns metrics and labels interesting to export about a container or sandbox.
runsc/mitigatePackage mitigate provides libraries for the mitigate command.
runsc/profilePackage profile contains profiling utils.
runsc/sandboxPackage sandbox creates and manipulates sandboxes.
runsc/sandbox/bpfPackage bpf provides compiled bpf programs as byte slices.
runsc/specutilsPackage specutils contains utility functions for working with OCI runtime specs.
runsc/specutils/safemount_testsafemount_runner is used to test the SafeMount function.
runsc/specutils/seccompPackage seccomp implements some features of libseccomp in order to support OCI.
runsc/starttimePackage starttime holds the time the `runsc` command started.
runsc/versionPackage version holds a string containing version information for runsc.
Version
v0.0.0-20250605235530-a6711d1e1dc6 (latest)
Published
Jun 5, 2025
Platform
linux/amd64
Imports
2 packages
Last checked
4 hours ago

Tools for package owners.