gatewayd icon indicating copy to clipboard operation
gatewayd copied to clipboard

Run plugins in contained runners (containers)

Open mostafa opened this issue 10 months ago • 0 comments

The go-plugin v1.5.0 introduced a new feature, called Runner, that allows custom command runner implementations, that are mutually exclusive with Cmd and Reattach. Based on the example module added to the go-secure-stdlib, a plugin container can be constructed that runs the plugins inside an OCI container, which effectively isolates the plugins and allows more restrictions/limitations to be applied to those plugins.

The idea is to integrate this in GatewayD to achieve plugin isolation in containers, and be able to control plugins from a separate runner.

mostafa avatar Sep 02 '23 00:09 mostafa