Make it easier to install gVisor in Docker Desktop

[EtiennePerot]

Description

Docker Desktop is a thing and it's not straightforward to configure the in-VM daemon with additional runtimes.

Is this feature related to a specific bug?

I saw this cool video showing how to install gVisor inside Docker Desktop.

Do you have a specific solution in mind?

Provide installation instructions or a more convenient way to install gVisor on Docker Desktop (like a pre-built Docker image that can self-extract?)

[milantracy]

i thought about it before, alterntively, shall we consider vagrant¹ (which turns up a VM), it will provide developers with a consistent dev environment instantly, it seems like a very similar experience to the video

Footnotes

1. https://www.vagrantup.com/ ↩

[EtiennePerot]

That seems like a solution towards the "I want a dev environment in which to work on gVisor" use-case. The Docker Desktop thing is more about the "I'm already a Docker Desktop user and I want to start isolating containers running on my machine" use-case.

[rimelek]

Hi. I made that video. Thank you for trying to make things easier with gVisor in Docker Desktop :) I tried to install the runtime in DD only for people who are curious, but don't have a Linux server and wouldn't want to create a new virtual machine just for testing a container runtime. I'm not sure how many people would actually need it in Docker Desktop, but it is true that many users are trying to do things in Docker Desktop that they can with Docker CE, and since they don't always understand the difference, following the official documentation they could find gVisor and want to try it. So while I don't think the main auience of gVisor is Docker Desktop users, if you had an easier way to install it in Docker Desktop and a guide for it in the gVisor documentation, that would be great indeed.

Of course, part of the video is about the fact that currently all runtimes are overridden by DD when the WSL2 backend is enabled and an nvidia GPU is available, but that is a different issue, probably not for you to solve. It is just good to know when you develop anything for DD and don't see it working on Windows.

@EtiennePerot

like a pre-built Docker image that can self-extract

How would that work? Similarly to my solution just with a pre-built image and a command mentioned in the documentation? Or could it be a Docker Desktop extension that runs before other containers? I haven't tried to make an extension yet, so I'm not even sure if that is possible, but that would probably have the best user experience.