Please use this identifier to cite or link to this item: https://doi.org/10.21256/zhaw-22694
Publication type: Conference paper
Type of review: Peer review (publication)
Title: Analysis and improvement of heterogeneous hardware support in Docker images
Authors: Gkikopoulos, Panagiotis
Schiavoni, Valerio
Spillner, Josef
et. al: No
DOI: 10.1007/978-3-030-78198-9_9
10.21256/zhaw-22694
Proceedings: Distributed Applications and Interoperable Systems
Page(s): 125
Pages to: 142
Conference details: 21st International Conference on Distributed Applications and Interoperable Systems (DAIS), Valletta, Malta (online), 14-18 June 2021
Issue Date: 9-Jun-2021
Series: Lecture Notes in Computer Science
Series volume: 12718
Publisher / Ed. Institution: Springer
Publisher / Ed. Institution: Cham
ISBN: 978-3-030-78197-2
978-3-030-78198-9
Language: English
Subject (DDC): 004: Computer science
Abstract: Docker images are used to distribute and deploy cloud-native applications in containerised form. A container engine runs them with separated privileges according to namespaces. Recent studies have investigated security vulnerabilities and runtime characteristics of Docker images. In contrast, little is known about the extent of hardware-dependent features in them such as processor-specific trusted execution environments, graphics acceleration or extension boards. This problem can be generalised to missing knowledge about the extent of any hardware-bound instructions within the images that may require elevated privileges. We first conduct a systematic one-year evolution analysis of a sample of Docker images concerning their use of hardware-specific features. To improve the state of technology, we contribute novel tools to manage such images. Our heuristic hardware dependency detector and a hardware-aware Docker executor hdocker give early warnings upon missing dependencies instead of leading to silent or untimely failures. Our dataset and tools are released to the research community.
URI: https://digitalcollection.zhaw.ch/handle/11475/22694
Fulltext version: Accepted version
License (according to publishing contract): Licence according to publishing contract
Restricted until: 2022-06-09
Departement: School of Engineering
Organisational Unit: Institute of Applied Information Technology (InIT)
Appears in collections:Publikationen School of Engineering

Files in This Item:
File Description SizeFormat 
2021_Spillner_HDocker.pdfAccepted Version332.57 kBAdobe PDFThumbnail
View/Open


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.