Hi everyone, it has been a long time since I last wrote in and I thought I would post a quick update on what we have been working on, essentially the following :
-
Erle has been working on using Apache Thrift as our messaging and communications framework.
- Unprivileged LXC containers and focu...
Been trying out the Sandbox code. Seeing it in action is, for us, a dream come true.
For a long while now, the need to isolate the applications being started has been high on the agenda. Thanks to a load of work by Jeetu to integrate the awesome LXC code into our ebrainpool client, the client now...
As I look to embark on a trip to the sands of Phuket, Thailand in the next 3 hours, I'm pleased to announce that code to implement sandboxing is now up in it's own branch in the git repo. The basic design of this sandbox code has been documented in the blog Building the eBrainPool Linux Container -...
The previous two posts on building the eBrainPool Linux Container have outlined the following strategies and problems associated with them : Design 1. Bridging the network interface on host Design 2. Unique network bridge for container Both the above strategies have the deficiency that they requ...
This is the second part in my series of blog entries on designing an eBrainPool Linux Container that follows objectives I outlined in my previous post Building the eBrainPool Linux Container - Part 1
Design 2 - Unique network bridge for container
Maximum security with minimum complexity - this...
I've been toying with Linux Containers (LXC) to provide a sandbox for eBrainPool. Design objectives of the eBrainPool system with regards to sandboxing can be roughly jotted down as :
-
applications on the host should be run within this sandbox and shared to the outside world.
-
filesystem i...
Ok Ok...the above pic isn't a sandbox but of cottages by the sand taken during one of my trips to Goa, but it should still be enough to set the tempo for this blog post....and also hopefully take the people here to a nice tranquil place by the sea....the sun....the sand :)
So I've been toying with...