Skip to content

Commit

Permalink
added info about plugins
Browse files Browse the repository at this point in the history
  • Loading branch information
Nate-Smithline committed Dec 5, 2023
1 parent 2717807 commit 7e55828
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion Containerd/self-assessment.md
Original file line number Diff line number Diff line change
Expand Up @@ -229,7 +229,9 @@ Containerd allows people to use different container systems. This gives users of

**- Plug-ins:**

Containerd allows external plugins like AppArmor and Seccomp which can decrease the attack surface of the container management. However, this also creates separate challenges not managable directly from a Containerd implementation.
Containerd is built with a modular architecture so that other technologies can be integrated to enable new capabilities. The advantage with containerd is that these plugins can enhance the functionality of the system without needing to rebuild the containerd itself.

Popular systems include metadata, container managers, filesystem differentiators, and GRPC APIs. While this is a strength of Containerd, this modularity has been the culprit of most of its previous problems. This is mostly up to others and containerd has many times not handled these plugins correctly, leading to information being unnecessary leaked. In a way, one of its greatest strengths is its greatest security vulnerability.

**- Network Security:**

Expand Down

0 comments on commit 7e55828

Please sign in to comment.