Understanding File System Operations of a Secure Container Runtime Using System Call Tracing Technique

More Web Proxy on the site http://driver.im/

IEICE Transactions on Information and Systems

Online ISSN : 1745-1361
Print ISSN : 0916-8532

Regular Section

Understanding File System Operations of a Secure Container Runtime Using System Call Tracing Technique

Sunwoo JANG, Young-Kyoon SUH, Byungchul TAK

Author information

Keywords: secure container runtime, system call, gVisor

JOURNAL FREE ACCESS

2024 Volume E107.D Issue 2 Pages 229-233

DOI https://doi.org/10.1587/transinf.2023EDL8039

Details

Abstract

This letter presents a technique that observes system call mapping behavior of the proxy kernel layer of secure container runtimes. We applied it to file system operations of a secure container runtime, gVisor. We found that gVisor's operations can become more expensive than the native by 48× more syscalls for open, and 6× for read and write.

Content from these authors

Favorites & Alerts

Corresponding author

Register with J-STAGE for free!