Sandboxing Code in the Era of Containers

#1

Post by joaojeronimo » Thu, Mar 26, 2015, 6:26 PM UTC

Sandboxing Code in the Era of Containers
medium.com

Re: Sandboxing Code in the Era of Containers

#2

Post by mirashii » Thu, Mar 26, 2015, 9:14 PM UTC

Generally, the common wisdom is still that Docker, lxc, and linux containers in general haven't been audited and hardened enough to use for multi-tenant isolation, so this seems like an odd choice. The article doesn't talk at all about even doing some of the common hardening people might do in these circumstances (limit syscalls with seccomp, get rid of suid binaries, grsec, AppArmor).

I'd be extremely hesitant to trust the sandboxing here.

Re: Sandboxing Code in the Era of Containers

#3

Post by DannoHung » Thu, Mar 26, 2015, 9:41 PM UTC

mirashii wrote: post #2

Generally, the common wisdom is still that Docker, lxc, and linux containers in general haven't been audited and hardened enough to use for multi-tenant isolation, so this seems like an odd choice. The article doesn't talk at all about even doing some of the common hardening people might do in these circumstances (limit syscalls with seccomp, get rid of suid binaries, grsec, AppArmor). I'd be extremely hesitant to tr…

I don't know if you saw the story about Joyent's Triton dealie-majig yesterday or not: But do you know if the Solaris Zones are considered secure enough for multi-tenancy?

I'm excited about giving that a try, but I'm trying to find out if anyone has really different opinions on how well it can/will work. So far people seem to be really, really positive and I haven't seen much skepticism/criticism yet.

Re: Sandboxing Code in the Era of Containers

#4

Post by mirashii » Thu, Mar 26, 2015, 9:55 PM UTC

DannoHung wrote: post #3

mirashii wrote: post #2

Generally, the common wisdom is still that Docker, lxc, and linux containers in general haven't been audited and hardened enough to use for multi-tenant isolation, so this seems like an odd choice. The article doesn't talk at all about even doing some of the common hardening people might do in these circumstances (limit syscalls with seccomp, get rid of suid binaries, grsec, AppArmor). I'd be extremely hesitant to tr…

I don't know if you saw the story about Joyent's Triton dealie-majig yesterday or not: But do you know if the Solaris Zones are considered secure enough for multi-tenancy? I'm excited about giving that a try, but I'm trying to find out if anyone has really different opinions on how well it can/will work. So far people seem to be really, really positive and I haven't seen much skepticism/criticism yet.

Solaris zones have been around much longer, and have undergone audits and also been used for multitenancy in production for almost 10 years now. The new LX brand may have some new surface that it's worth auditing, but in general Solaris zones are probably, to my knowledge, the most trusted OS-level virtualization system amongst the major contenders. Disclaimer: I was a Joyent customer and have a few friends and acquaintances who work there still.