Recent studies have investigated security vulnerabilities and runtime characteristics of Docker images. A container engine runs them with separated privileges according to namespaces. Our dataset and tools are released to the research community.ĭocker images are used to distribute and deploy cloud-native applications in containerised form. Our heuristic hardware dependency detector and a hardware-aware Docker executor hdocker give early warnings upon missing dependencies instead of leading to silent or untimely failures. To improve the state of technology, we contribute novel tools to manage such images.

We first conduct a systematic one-year evolution analysis of a sample of Docker images concerning their use of hardware-specific features. This problem can be generalised to missing knowledge about the extent of any hardware-bound instructions within the images that may require elevated privileges. In contrast, little is known about the extent of hardware-dependent features in them such as processor-specific trusted execution environments, graphics acceleration or extension boards.

Docker images are used to distribute and deploy cloud-native applications in containerised form.

1.18 powersaves download