William Denniss • 5/6/2025

Running Docker in Docker on GKE Autopilot with gVisor

This technical article explains how to run Docker-in-Docker (DinD) workloads on Google Kubernetes Engine (GKE) Autopilot, which normally restricts privileged root access. It details the use of the gVisor sandbox to provide a secure, userland execution environment that mimics full access. The guide includes steps to enable necessary cluster capabilities (NET_ADMIN, SYS_ADMIN), build a custom container image from the gVisor project, and deploy a Pod with the required security context and configuration.

0 comments

#docker #Kubernetes #Container Security