摘要
针对Docker容器目前存在的内存资源信息尚未隔离的问题,设计了一种基于LKM技术的资源信息隔离方法.该方法通过LKM的形式利用系统调用劫持来修改读取到的procfs文件内容,从而实现了Docker中的容器资源信息隔离的功能,使得在其上运行的容器可以不用作任何修改就能达到资源信息隔离的目的.最后通过实验证明资源信息隔离的功能是可用的.
In view of the problem that the memory resource information in Docker container is not isolated, we design a resource information isolation method based on LKM technology. The method in the form of LKM uses system to call hijacking to modify the reading of the procfs file content, so as to realize the function of the Docker container resources information isolation, on which the containers run without any modification can achieve the purpose of resource information isolation. The experiments prove that the resource information isolation function is available.
出处
《计算机系统应用》
2016年第12期250-254,共5页
Computer Systems & Applications
