netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

gvisor.dev homepage: Minor fixes.

Browse Source 
This CL does the following:

- Add `<strong>emphasis</strong>` on the important keywords for each panel
- Mention "LLM-generated code" as code that can be sandboxed in gVisor
- Change "GPU support" header to "GPU & CUDA support"
- Add PNG transparency to images where it was missing
- Remove link to raw image file on architecture diagram
- Adjust panel icon size
- Adjust `<h2>` margins in panels
- Small CSS cleanups

PiperOrigin-RevId: 548764864
This commit is contained in:
Etienne Perot
2023-07-17 12:24:48 -07:00
committed by gVisor bot
parent 05f62e5e66
commit 42df09a2c8
4 changed files with 94 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/_sass/style.scss
+12
View File
@@ -195,6 +195,18 @@ table th {
margin-bottom: 0px;
}
/* Reduce h2 margins in the big "solution" panels on the homepage. */
.panel-solution h2 {
margin-top: 1em;
margin-bottom: 1em;
}
/* Same, but also remove the top-margin for the "features" panels. */
.panel-default h2 {
margin-top: 0em;
margin-bottom: 1em;
}
@media (min-width: 480px) {
/* Set panel height smart phones landscape. */
.panel-solution {
website/assets/images/gvisor-helmet-universe.png
BIN
View File
Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 15 KiB

After

Width:  |  Height:  |  Size: 15 KiB

website/assets/images/gvisor-high-level-arch.png
BIN
View File
Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 35 KiB

After

Width:  |  Height:  |  Size: 34 KiB

website/index.md
+82 -75
View File
@@ -28,14 +28,12 @@
<div class="container">
<div class="row">
<div class="col-md-6 pull-right gallery-popup">
<a href="/assets/images/gvisor-high-level-arch.png">
<img
src="/assets/images/gvisor-high-level-arch.png"
alt="gVisor high-level architecture"
title="gVisor high-level architecture"
class="img-responsive"
>
</a>
/>
</div>
<div class="col-md-6 pull-left">
<div class="divide-xl"></div>
@@ -59,15 +57,15 @@
alt="gVisor can run untrusted code"
title="gVisor can run untrusted code"
class="img-responsive"
>
/>
</div>
<div class="col-md-8 pull-right">
<div class="divide-xl"></div>
<h2>Run Untrusted Code</h2>
<p class="info-text">Isolate Linux hosts from containers so you can
safely run user-uploaded or third-party code. Add defense-in-depth
measures to your stack, bringing additional security to your
infrastructure.
<strong>safely run user-uploaded, LLM-generated, or third-party
code</strong>. Add defense-in-depth measures to your stack, bringing
additional security to your infrastructure.
</p>
<div class="divide-xl"></div>
</div>
@@ -81,14 +79,15 @@
alt="gVisor secure by default"
title="gVisor secure by default"
class="img-responsive"
>
/>
</div>
<div class="col-md-8 pull-left">
<div class="divide-xl"></div>
<h2>Protect Workloads & Infrastructure</h2>
<p class="info-text">Fortify hosts and containers against escapes and
privilege escalation CVEs, enabling strong isolation for
security-critical workloads as well as multi-tenant safety.
<p class="info-text">Fortify hosts and containers against
<strong>escapes and privilege escalation CVEs</strong>, enabling
strong isolation for security-critical workloads as well as
multi-tenant safety.
</p>
<div class="divide-xl"></div>
</div>
@@ -100,14 +99,15 @@
<img src="/assets/images/gvisor-reduce-risk.png"
alt="gVisor reduces risk"
title="gVisor reduces risk"
class="img-responsive">
class="img-responsive"
/>
</div>
<div class="col-md-8 pull-right">
<div class="divide-xl"></div>
<h2>Reduce Risk</h2>
<p class="info-text">Deliver runtime visibility that integrates
with popular threat detection tools to quickly identify threats,
generate alerts, and enforce policies.
with popular <strong>threat detection tools</strong> to quickly
identify threats, generate alerts, and enforce policies.
</p>
<div class="divide-xl"></div>
</div>
@@ -127,29 +127,31 @@
<div class="container" style="margin-top:20px">
<div class="col-md-1"></div>
<div class="col-md-5">
<div class="panel panel-default panel-solution">
<div class="panel panel-solution">
<div class="panel-body">
<div align="center"><span><i class="fas fa-shield-alt fa-2x"></i></span></div>
<div align="center"><span><i class="fas fa-shield-alt fa-4x"></i></span></div>
<h2 align="center"><span>Improve your container security</span></h2>
<p class="info-text">Give your K8s, SaaS, or Serverless
infrastructure additional layers of protection when running
end-user code, untrusted code, or third-party code. Enable
strong isolation for sharing resources and delivering
multi-tenant environments.
end-user code, untrusted code, LLM-generated code, or
third-party code. Enable <strong>strong isolation</strong> for
sharing resources and delivering <strong>multi-tenant
environments</strong>.
</p>
</div>
</div>
</div>
<div class="col-md-5">
<div class="panel panel-default panel-solution">
<div class="panel panel-solution">
<div class="panel-body">
<div align="center"><span><b><i class="fas fa-cogs fa-2x"></i></b></span></div>
<div align="center"><span><b><i class="fas fa-cogs fa-4x"></i></b></span></div>
<h2 align="center"><span>Deliver security-imperative apps</span></h2>
<p class="info-text">gVisor adds defense-in-depth measures to
your containers, allowing you to safeguard security-sensitive
workloads like financial transactions, healthcare services,
personal identifiable information, and other
security-imperative applications.
your containers, allowing you to <strong>safeguard
security-sensitive workloads</strong> like financial
transactions, healthcare services, personal identifiable
information, and other <strong>security-imperative
applications</strong>.
</p>
</div>
</div>
@@ -161,29 +163,31 @@
<div class="container" style="margin-bottom:40px">
<div class="col-md-1"></div>
<div class="col-md-5">
<div class="panel panel-default panel-solution">
<div class="panel panel-solution">
<div class="panel-body">
<div align="center"><span><b><i class="fas fa-rocket fa-2x"></i></b></span></div>
<div align="center"><span><b><i class="fas fa-rocket fa-4x"></i></b></span></div>
<h2 align="center"><span>Increase security productivity</span></h2>
<p class="info-text">Isolating your K8s, SaaS, Serverless,
DevSecOps lifecycle or CI/CD pipeline is easy with gVisor.
<p class="info-text">Isolate your K8s, SaaS, Serverless,
DevSecOps lifecycle or CI/CD pipeline.
gVisor helps you achieve a secure-by-default posture. Spend
less time staying on top of security disclosures, and more
time building what matters.
<strong>less time staying on top of security
disclosures</strong>, and <strong>more time building what
matters</strong>.
</p>
</div>
</div>
</div>
<div class="col-md-5">
<div class="panel panel-default panel-solution">
<div class="panel panel-solution">
<div class="panel-body">
<div align="center"><span><b><i class="fas fa-check fa-2x"></i></b></span></div>
<div align="center"><span><b><i class="fas fa-check fa-4x"></i></b></span></div>
<h2 align="center"><span>Enforce compliance</span></h2>
<p class="info-text">gVisor safeguards against many
cloud-native attacks by reducing the attack surface exposed
to your containers. Shield services like APIs, configs,
infrastructure as code, DevOps tooling, and supply chains,
lowering the risk present in a typical cloud-native stack.
cloud-native attacks by <strong>reducing the attack
surface</strong> exposed to your containers. Shield services
like APIs, configs, infrastructure as code, DevOps tooling,
and supply chains, lowering the risk present in a typical
cloud-native stack.
</p>
</div>
</div>
@@ -217,19 +221,21 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="margin-top:0px;">
<h2>
<a href="docs/architecture_guide/security/#principles-defense-in-depth" class="feature-link">
Defense in Depth
</a>
</h2>
<p class="info-text" style="margin-bottom:0px">
gVisor implements the Linux API: by intercepting all
sandboxed application system calls to the kernel, it protects
the host from the application. In addition, gVisor sandboxes
itself from the host using Linux's isolation capabilities.
<strong>gVisor implements the Linux API</strong>: by
intercepting all sandboxed application system calls to the
kernel, it protects the host from the application. In
addition, <strong>gVisor also sandboxes itself from the
host</strong> using Linux's isolation capabilities.
Through these layers of defense, gVisor achieves true
defense-in-depth while still providing VM-like performance and
container-like resource efficiency.
defense-in-depth while still providing
<strong>VM-like performance</strong> and
<strong>container-like resource efficiency</strong>.
</p>
</div>
</div>
@@ -237,16 +243,16 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="margin-top:0px;">
<h2>
<a href="docs/architecture_guide/security/" class="feature-link">
Secure by Default
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">gVisor runs with
the least amount of privileges and the strictest possible
system call filter needed to function. gVisor implements the
Linux kernel and its network stack using Go, a memory-safe and
type-safe language.
the <strong>least amount of privileges</strong> and the
strictest possible system call filter needed to function. gVisor
implements the Linux kernel and its network stack using Go, a
memory-safe and type-safe language.
</p>
</div>
</div>
@@ -260,15 +266,15 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="margin-top:0px;">
<h2>
<a href="docs/architecture_guide/platforms/" class="feature-link">
Runs Anywhere
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">gVisor runs
anywhere Linux does. It works on x86 and ARM, on VMs or
bare-metal, and does not require virtualization support.
gVisor works well on all popular cloud providers.
<p class="info-text" style="margin-bottom:0px;">gVisor
<strong>runs anywhere Linux does</strong>. It works on x86 and
ARM, on VMs or bare-metal, and does not require virtualization
support. gVisor works well on all popular cloud providers.
</p>
</div>
</div>
@@ -276,15 +282,15 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="color:#272261;margin-top:0px;">
<h2 style="color:#272261">
<a href="docs/user_guide/compatibility/" class="feature-link">
Cloud Ready
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">gVisor works
with Docker, Kubernetes, and containerd. Many popular
applications and images are deployed in production
environments on gVisor.
<p class="info-text" style="margin-bottom:0px;">gVisor
<strong>works with Docker, Kubernetes, and
containerd</strong>. Many popular applications and images are
deployed in production environments on gVisor.
</p>
</div>
</div>
@@ -298,7 +304,7 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="color:#272261;margin-top:0px;">
<h2 style="color:#272261">
<a href="docs/architecture_guide/performance/" class="feature-link">
Fast Startups and Execution
</a>
@@ -307,8 +313,8 @@
containers start up in milliseconds and have minimal resource
overhead. They act like, feel like, and <em>actually are</em>
containers, not VMs. Their resource consumption can scale up
and down at runtime, enabling container-native levels of
scheduling efficiency.
and down at runtime, enabling <strong>container-native
resource efficiency</strong>.
</p>
</div>
</div>
@@ -316,16 +322,16 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="color:#272261;margin-top:0px;">
<h2 style="color:#272261">
<a href="docs/user_guide/checkpoint_restore/" class="feature-link">
Checkpoint and Restore
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">gVisor can
checkpoint and restore containers. Use it to cache warmed up
services, resume workloads on other machines, snapshot
execution, save state for forensics, or branch interactive
REPL sessions.
<strong>checkpoint and restore containers</strong>. Use it to
cache warmed-up services, resume workloads on other machines,
snapshot execution, save state for forensics, or branch
interactive REPL sessions.
</p>
</div>
</div>
@@ -339,16 +345,17 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="color:#272261;margin-top:0px;">
<h2 style="color:#272261">
<a href="/docs/user_guide/runtimemonitor/" class="feature-link">
Runtime Monitoring
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">Observe runtime
behavior of your applications by streaming application actions
(trace points) to an external threat detection engine like
<a href="https://falco.org" style="color:#272261">
Falco</a> and generate alerts.
(trace points) to an external <strong>threat detection
engine</strong> like
<a href="https://falco.org" style="color:#272261">Falco</a>
and generate alerts.
</p>
</div>
</div>
@@ -356,14 +363,14 @@
<div class="col-md-5">
<div class="panel panel-default" style="border:none;box-shadow:none;">
<div class="panel-body">
<h2 style="color:#272261;margin-top:0px;">
<h2 style="color:#272261">
<a href="blog/2023/06/20/gpu-pytorch-stable-diffusion/" class="feature-link">
GPU Support
GPU &amp; CUDA Support
</a>
</h2>
<p class="info-text" style="margin-bottom:0px;">gVisor
applications can use CUDA on Nvidia GPUs, bringing isolation
to AI/ML workloads.
applications can <strong>use CUDA on Nvidia GPUs</strong>,
bringing isolation to AI/ML workloads.
</p>
</div>
</div>