gVisor container sandbox runtime

 gVisor is an application kernel, written in Go, that implements a
 substantial portion of the Linux system surface. It includes an Open
 Container Initiative (OCI) runtime called runsc that provides an
 isolation boundary between the application and the host kernel.
 .
 This package provides runsc runtime, which can be integrated to Docker
 and Kubernetes.