Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run plugins in contained runners (containers) #304

Open
Tracked by #277
mostafa opened this issue Sep 2, 2023 · 0 comments
Open
Tracked by #277

Run plugins in contained runners (containers) #304

mostafa opened this issue Sep 2, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@mostafa
Copy link
Member

mostafa commented Sep 2, 2023

The go-plugin v1.5.0 introduced a new feature, called Runner, that allows custom command runner implementations, that are mutually exclusive with Cmd and Reattach. Based on the example module added to the go-secure-stdlib, a plugin container can be constructed that runs the plugins inside an OCI container, which effectively isolates the plugins and allows more restrictions/limitations to be applied to those plugins.

The idea is to integrate this in GatewayD to achieve plugin isolation in containers, and be able to control plugins from a separate runner.

@mostafa mostafa self-assigned this Sep 2, 2023
@mostafa mostafa added the enhancement New feature or request label Sep 2, 2023
@mostafa mostafa changed the title Run plugins in a contained runner (container) Run plugins in contained runners (containers) Sep 2, 2023
@mostafa mostafa removed their assignment Dec 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Development

No branches or pull requests

1 participant