Posts

Showing posts with the label docker

Docker Support for Isolator

Introduction Some of you may remember - and hopefully have even tried! - my Isolator project . Isolator is a framework for running isolated code for .NET. What this means is that possibly unsafe code can be run in a secure, isolated, way. It offers some quite different isolation strategies: Process isolation : the code to execute runs in another process, possibly under a different identity (on Windows only) Assembly isolation : uses an assembly load context to isolate the code execution, which is then unloaded Distributed isolation : the code to execute is sent to possibly another server for execution Scanned : the code to execute is first checked for problematic code using my ReferencesScanner project Now, I added support for Docker isolation! What this means is, if you have Docker running on your machine, you can spawn an image that will just be used for running your code, and after that will be gone. This provides another very restricted level of isolation. For Docker A...