Skip to content

Commit

Permalink
added info about plugins
Browse files Browse the repository at this point in the history
Signed-off-by: Nate-Smithline <[email protected]>
  • Loading branch information
Nate-Smithline committed Dec 11, 2023
1 parent 5d31fe0 commit 8c9d4dd
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion Containerd/self-assessment.md
Original file line number Diff line number Diff line change
Expand Up @@ -229,7 +229,9 @@ Containerd allows people to use different container systems. This gives users of

**- Plug-ins:**

Containerd allows external plugins like AppArmor and Seccomp which can decrease the attack surface of the container management. However, this also creates separate challenges not managable directly from a Containerd implementation.
Containerd is built with a modular architecture so that other technologies can be integrated to enable new capabilities. The advantage with containerd is that these plugins can enhance the functionality of the system without needing to rebuild the containerd itself.

Popular systems include metadata, container managers, filesystem differentiators, and GRPC APIs. While this is a strength of Containerd, this modularity has been the culprit of most of its previous problems. This is mostly up to others and containerd has many times not handled these plugins correctly, leading to information being unnecessary leaked. In a way, one of its greatest strengths is its greatest security vulnerability.

**- Network Security:**

Expand Down

0 comments on commit 8c9d4dd

Please sign in to comment.