#runsc

[ultra-kel]

I had a really nice run down to the beach (Isle of Palms) from my hotel. There was a couple miles of bridges to get to the beach and there was a huge wall of fog the entire time. Perfect! #altra #altrarunning #run #runsc #southcarolina #isleofpalms #hammer #hammer nutrition #caterpylaces #onthebeach #fit #torinplush #shokzsquad (at Isle of Palms, South Carolina) https://www.instagram.com/p/B4htPGaHU8G/?igshid=oa89grkkgcet

[joel8x]

Yesterday I ran my heart out & while I earned a new personal record for the #Marathon, I missed my goal by 28 seconds! It was a cold & windy start but overall the race was great. I really enjoy the @runmbm #myrtlebeachmarathon Next race is the @cooperriverbridgerun in exactly 4 weeks! #getoverit @charlestonrunningclub #runnersofinstagram #runningcommunity #runners #runsc (at Myrtle Beach, South Carolina) https://www.instagram.com/p/B9fCS29hDnf/?igshid=1vfe6fj7rpf05

[petergasca]

Ran 7.1 total kilometers with Nike⁠ Run Club Fun day fitness testing with a 1 mile sprint, then threw on a 5.5k for good measure. It’s spring after all, so who can resist?? #runmyrtlebeach #runSC #gettingoldfast https://ift.tt/2Wue5Yc

[gslin]

Google 推出 gVisor 強化 Container 的安全性

Google 推出 gVisor 強化 Container 的安全性

Google 發表了 gVisor，針對 Linux 所使用的 container 技術強化安全���部份：「Open-sourcing gVisor, a sandboxed container runtime」。

依照 Google 的說法，一般 container 的架構是這樣：

而具有強隔離性的 VM 技術則是這樣：

在 VM 的 overhead 偏重，但一般的 container 安全性又不夠。而 gVisor 則是這樣：

對於目前最常見的 Docker 系統上，在安裝 gVisor 後只需要指定 --runtime=runsc 就可以使用 (預設是 --runtime=runc)，像是這樣：

$ docker run --runtime=runsc hello-world $ docker run --runtime=runsc -p 3306:3306 mysql

其中

[pinkfeathrs]

Hello Charleston! . . #runsc #runcharleston #whereirun #whereifly #flystyle #theuncommonthread #nodaysoff (at Charleston Music Hall)

[caroliente-collection]

#CurrentSituation Catch me on them #MyrtleBeach back streets. . #CarolienteSummer well what's left of it...no #bikeweek just vacation 2nd home. .#Caroliente #RunNC / #RunSC (at Near Myrtle Beach South Carolina)

[jpopvevo]

Life - 1

Me - 0

[petergasca]

Hectic week that’s left me empty Slowed by pollen of which there’s plenty That’s the toll To meet your goal This week fifteen, next week twenty #runmyrtlebeach #setgoals #imotivateme #runSC https://ift.tt/2YgwvNJ

[petergasca]

Cold air beats these tired lungs Time off leaves them on the bottom rungs Quiet mind, I am Drown by Pearl Jam A goal now lives where doubt once hung. #runpoem #runmyrtlebeach #runmyr #runSC #shutupandrun #dadfitness #imotivateme http://bit.ly/2FvawwB

[petergasca]

Difficult run, but even battling a chest cold, it feels great to get outside. The 67F in #MyrtleBeach today is a big motivator. Great start to the week. Gorgeous light through blue sky stares Absorbing warmth in spite of fares Disappointing run At least it’s done End the week with goals to spare #runpoem #runmyrtlebeach #runmyr #imotivateme #run #runSC http://bit.ly/2QqdIKU

[caroliente-collection]

View this post on Instagram

A post shared by 👑Caroliente Collection👑 (@caroliente)

I can't make this stuff up... No scripts,No actors,No special effects... Just #RNS threw my eyes, just like I see it.. "CarolinaBluePrint of UrbanFashion" ... Coming soon #sneakpeek clip #caroliente #runnc / #runsc #carolientesummer (at CarolinaBluePrintofUrbanFashion)