Repository navigation
Replies: 1 comment
|
Patches welcome to create an RPM package :) |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
This is slightly cursed, but for what it's worth you can actually install gVisor on Fedora following the instructions for apt with the only modifications needed being:
[sudo] dnf install aptapt upgrade, you can always do the pretty minimal config manually.The main advantage I see here is that it gets you proper key based verification using a public key distributed through multiple channels instead of just relying on a sha512 hash downloaded from the exact same server (ie better supply chain attack resilience), as well as updates with a simple one line command. For those who don't want to colour this far outside the lines, you can also configure apt to run in download only mode and extract it manually, which still gets you public key verification. Downside is obviously that Fedora isn't built with the expectation of apt being used to actually do any package management, although without further configuration this only configured the gVisor repo with no others, and the gVisor package is pretty simple in terms of how much it changes the host system.
All reactions