<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Harsh Thakur on Fission</title><link>https://deploy-preview-295--fission-website.netlify.app/author/harsh-thakur/</link><description>Recent content in Harsh Thakur on Fission</description><generator>Hugo</generator><language>en</language><atom:link href="https://deploy-preview-295--fission-website.netlify.app/author/harsh-thakur/index.xml" rel="self" type="application/rss+xml"/><item><title>Using gVisor with Fission</title><link>https://deploy-preview-295--fission-website.netlify.app/blog/using-gvisor-with-fission/</link><pubDate>Wed, 10 Feb 2021 18:09:02 +0530</pubDate><guid>https://deploy-preview-295--fission-website.netlify.app/blog/using-gvisor-with-fission/</guid><description>&lt;h1 id="introduction"&gt;Introduction&lt;/h1&gt;
&lt;p&gt;Have you ever run into a scenario where you had to run untrusted code? Containers are great from a performance perspective but they have a considerable access to the kernel which can be exploited. In order to have the security of VMs and speed of containers, projects like &lt;a href="https://github.com/google/gvisor"&gt;gVisor&lt;/a&gt; and &lt;a href="https://github.com/kata-containers/kata-containers"&gt;kata containers&lt;/a&gt; have risen. In this post, we&amp;rsquo;ll take a look at gVisor provides an application kernel for containers. It provides a runtime which can be used by Kubernetes. To understand more about how gVisor provides security, please go through &lt;a href="https://gvisor.dev/docs/architecture_guide/security/"&gt;this&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>