sandbox: always use latest runsc version

toothrot · toothrot · commit 4d02eef9b3e4 · 2021-02-24T22:40:36.000Z
Configure cloud-init.yaml to always use the latest stable runsc release. This will ensure we get security and bug fixes as we restart our sandbox instances. Fixes golang/go#38317 Change-Id: Ib1d763a3256cb2ce37388c700fdbf35fec8d8d80 Reviewed-on: https://go-review.googlesource.com/c/playground/+/295650 Trust: Alexander Rakoczy <alex@golang.org> Run-TryBot: Alexander Rakoczy <alex@golang.org> TryBot-Result: Go Bot <gobot@golang.org> Reviewed-by: Carlos Amedee <carlos@golang.org> Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
diff --git a/sandbox/cloud-init.yaml b/sandbox/cloud-init.yaml
@@ -12,6 +12,6 @@ write_files:
     }
 
 runcmd:
-- curl -L -o /var/lib/docker/runsc https://storage.googleapis.com/go-builder-data/runsc-1.0.1
+- curl -L -o /var/lib/docker/runsc https://storage.googleapis.com/gvisor/releases/release/latest/x86_64/runsc
 - chmod +x /var/lib/docker/runsc
 - systemctl reload docker.service

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,6 @@ write_files:`
`12`	`12`	`}`
`13`	`13`
`14`	`14`	`runcmd:`
`15`		`-- curl -L -o /var/lib/docker/runsc https://storage.googleapis.com/go-builder-data/runsc-1.0.1`
	`15`	`+- curl -L -o /var/lib/docker/runsc https://storage.googleapis.com/gvisor/releases/release/latest/x86_64/runsc`
`16`	`16`	`- chmod +x /var/lib/docker/runsc`
`17`	`17`	`- systemctl reload docker.service`