Skip to Main content Skip to Navigation
New interface
Conference papers

Analysis and Improvement of Heterogeneous Hardware Support in Docker Images

Abstract : Docker images are used to distribute and deploy cloud-native applications in containerised form. A container engine runs them with separated privileges according to namespaces. Recent studies have investigated security vulnerabilities and runtime characteristics of Docker images. In contrast, little is known about the extent of hardware-dependent features in them such as processor-specific trusted execution environments, graphics acceleration or extension boards. This problem can be generalised to missing knowledge about the extent of any hardware-bound instructions within the images that may require elevated privileges. We first conduct a systematic one-year evolution analysis of a sample of Docker images concerning their use of hardware-specific features. To improve the state of technology, we contribute novel tools to manage such images. Our heuristic hardware dependency detector and a hardware-aware Docker executor hdocker give early warnings upon missing dependencies instead of leading to silent or untimely failures. Our dataset and tools are released to the research community.
Complete list of metadata

https://hal.inria.fr/hal-03384856
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Tuesday, October 19, 2021 - 10:53:34 AM
Last modification on : Tuesday, October 19, 2021 - 11:05:16 AM
Long-term archiving on: : Thursday, January 20, 2022 - 6:37:30 PM

File

 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2024-01-01

Please log in to resquest access to the document

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Panagiotis Gkikopoulos, Valerio Schiavoni, Josef Spillner. Analysis and Improvement of Heterogeneous Hardware Support in Docker Images. 21th IFIP International Conference on Distributed Applications and Interoperable Systems (DAIS), Jun 2021, Valletta, Malta. pp.125-142, ⟨10.1007/978-3-030-78198-9_9⟩. ⟨hal-03384856⟩

Share

Metrics

Record views

15