Run docker compose in gVisor

[milantracy]

Description

I am playing with docker compose in gVisor, if any issue is seen, please post here or create an issue

I managed to run hello world via docker compose as

root@16c3b87a0758:/hello# docker compose up
[+] Running 2/2
 ✔ hello_world Pulled                                                                                                                                                                    2.0s 
   ✔ e6590344b1a5 Pull complete                                                                                                                                                          0.3s 
[+] Running 2/2
 ✔ Network hello_default          Created                                                                                                                                                0.0s 
 ✔ Container hello-hello_world-1  Created                                                                                                                                                0.1s 
Attaching to hello_world-1
hello_world-1  | 
hello_world-1  | Hello from Docker!
hello_world-1  | This message shows that your installation appears to be working correctly.
hello_world-1  | 
hello_world-1  | To generate this message, Docker took the following steps:
hello_world-1  |  1. The Docker client contacted the Docker daemon.
hello_world-1  |  2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
hello_world-1  |     (amd64)
hello_world-1  |  3. The Docker daemon created a new container from that image which runs the
hello_world-1  |     executable that produces the output you are currently reading.
hello_world-1  |  4. The Docker daemon streamed that output to the Docker client, which sent it
hello_world-1  |     to your terminal.
hello_world-1  | 
hello_world-1  | To try something more ambitious, you can run an Ubuntu container with:
hello_world-1  |  $ docker run -it ubuntu bash
hello_world-1 exited with code 0
root@16c3b87a0758:/hello# cat docker-compose.yml 
services:
  hello_world:
    image: hello-world

Is this feature related to a specific bug?

No response

Do you have a specific solution in mind?

No response

[pkit]

Last time I've checked DNS was broken in docker compose. Mainly because of how iptables are ignored on lo.