Which docker images/libraries are gVisor incompatible in App Platform?

Heya,

Just came across this answer and decided to write some general guidelines for anyone who comes across this in the future despite the old question.

Yes, there are some libraries/images that currently do not work with the gVisor runtime in the App Platform. These usually include libraries or images that require specific kernel features or higher-level permissions, as gVisor has a smaller Linux system call surface and operates with a reduced privilege level for enhanced security.

Some examples include certain networking tools, certain debugging utilities, and specific databases. Note that the specifics can change, so it’s always best to test your app to ensure it works as expected.

For more information about the limitations of the gVisor runtime, you can consult the gVisor compatibility documentation on GitHub. Also, you can refer to the DigitalOcean App platform docs for more detailed information.

Hope that this helps!