The easiest way to get `runsc` is from the [latest nightly
build][latest-nightly]. After you download the binary, check it against the
SHA512 [checksum file][latest-hash].

Older builds can also be found here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc`

With corresponding SHA512 checksums here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc.sha512`

**It is important to copy this binary to a location that is accessible to all
users, and ensure it is executable by all users**, since `runsc` executes itself
as user `nobody` to avoid unnecessary privileges. The `/usr/local/bin` directory is
a good place to put the `runsc` binary.

```bash
wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
sha512sum -c runsc.sha512
chmod a+x runsc
sudo mv runsc /usr/local/bin
```

[latest-nightly]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
[latest-hash]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
[oci]: https://www.opencontainers.org

The easiest way to get `runsc` is from the [latest nightly
build][latest-nightly]. After you download the binary, check it against the
SHA512 [checksum file][latest-hash].

Older builds can also be found here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc`

With corresponding SHA512 checksums here:
`https://storage.googleapis.com/gvisor/releases/nightly/${yyyy-mm-dd}/runsc.sha512`

**It is important to copy this binary to a location that is accessible to all
users, and ensure it is executable by all users**, since `runsc` executes itself
as user `nobody` to avoid unnecessary privileges. The `/usr/local/bin` directory is
a good place to put the `runsc` binary.

```bash
(
  set -e 
  wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
  wget https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
  sha512sum -c runsc.sha512
  chmod a+x runsc
  sudo mv runsc /usr/local/bin
)
```

[latest-nightly]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc
[latest-hash]: https://storage.googleapis.com/gvisor/releases/nightly/latest/runsc.sha512
[oci]: https://www.opencontainers.org

Install gVisor using a subshell.
Install gVisor using a subshell.

If the user copy-and-pastes the commands to install gVisor in one go,
the commands should stop early if there is an error. Particularly, if
the runsc sha does not match.
