Container in container method to confine privileged mode execution during host data exchange in a containerized environment
摘要:
A disclosed method for implementing containers in an information handling system generates, with a first non-privileged container, a request that is sent to a RESTful API. Whenever the API identifies a request requiring host access the API launches a second container, which is configured to operate in a privileged execution mode. The second container accesses the host and executes the requested actions. When the request completes, the first container resumes non-privileged execution, thereby confining privileged mode execution to a container that is only active during host interaction. The host access can be access required to: exchange data with the host, query the host for hardware information, and modify host configuration. The host may be implanted within a device featuring an HCI infrastructure. In one configuration, the host resides of one of multiple distinct nodes of an HCI appliance.
信息查询
0/0