Computing and Library Services - delivering an inspiring information environment

Securing User Defined Containers for Scientific Computing

Higgins, Joshua, Holmes, Violeta and Venters, Colin (2016) Securing User Defined Containers for Scientific Computing. In: 2016 International Conference on High Performance Computing & Simulation (HPCS). IEEE, HPCS 2016 Conference, Innsbruck, Austria, pp. 449-453. ISBN 978-1-5090-2088-1

[img] PDF - Published Version
Restricted to Repository staff only

Download (128kB)


Linux containers and Docker have gained immense popularity as a lightweight alternative to hypervisor based Virtual Machines (VMs). In the context of High Performance Computing and the scientific community, it is clear that containers can serve many useful purposes from system administration, to improved cluster resource management and as a format for sharing reproducible research. However, when compared to VMs, containers seem to trade isolation for performance and ease of use, which poses unique security challenges. In this paper we review how Docker is being used in science, highlight easy to perform exploits, and evaluate the impact of these on HPC deployments. We also summarise a number of strategies for hardening such a system to reduce the vulnerability of hosting User Defined Containers. Based on these, an original solution to enforce default options and container ownership for non-administrative users in the HPC use case is presented, in addition to the experience of implementing such a system on a cluster at the University of Huddersfield.

Item Type: Book Chapter
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Q Science > QA Mathematics > QA76 Computer software
Schools: School of Computing and Engineering
School of Computing and Engineering > High-Performance Intelligent Computing > High Performance Computing Research Group
Related URLs:
Depositing User: Violeta Holmes
Date Deposited: 28 Nov 2016 10:40
Last Modified: 28 Aug 2021 16:53


Downloads per month over past year

Repository Staff Only: item control page

View Item View Item

University of Huddersfield, Queensgate, Huddersfield, HD1 3DH Copyright and Disclaimer All rights reserved ©