Replace sandboxes with Docker, using expendable containers to let untrusted users execute whatever they want without putting anything at risk

1. LESSONS IN HUBRIS

2. WHAT IS DOCKER?
2

3. WHAT IS DOCKER?
• That
awesome-looking whale we just saw
3

4. WHAT IS DOCKER?
• That
• The
awesome-looking whale we just saw
Linux container engine (lightweight VMs)
4

5. WHAT IS DOCKER?
• That
• The
• Git
awesome-looking whale we just saw
Linux container engine (lightweight VMs)
(and, sort of, GitHub) for deployment
5

6. LIFE BEFORE DOCKER
• Install
the right version of Java after four tries
• Download
• Remember
• Run
the leiningen script, run it
that you forgot to chmod +x it
the leiningen script again
• Clone
the project repo
• Follow
the README, apt-get some stuff, copy some things
• Run
the program
6

7. LIFE WITH DOCKER
7

8. DOCKER IMAGES
8

9. DOCKER IMAGES
9

10. BUILD ON EXISTING IMAGES
10

11. BUT WHAT CAN IT DO?
11

12. ENTER LAZUBOT
12

13. SANDBOXED EXECUTION
13

14. SANDBOXES ARE LAME
14

15. SANDBOXES ARE LAME
• Executor
cannot break the Zulip bot or access our secret
• Executor
cannot access the Internet
• File
• If
system changes to the executor container are fine
the executor gets out of control, the master kills it
15

16. I PROMISED YOU HUBRIS
16

17. DOCKER IN YO DOCKER
• Host
runs Ubuntu
Host
17

18. DOCKER IN YO DOCKER
• Host
runs Ubuntu
• Lazubot
runs in a Docker
container
Master
Host
18

19. DOCKER IN YO DOCKER
• Host
runs Ubuntu
Exec
• Lazubot
runs in a Docker
container
• Lazubot
creates child
containers that execute
arbitrary Clojure code
Master
Host
19
Exec

20. DOCKER IN YO DOCKER
• Host
runs Ubuntu
• Lazubot
runs in a Docker
container
• Lazubot
creates child
containers that execute
arbitrary Clojure code
Master
Host
20

21. REWARD!
21

22. REWARD!
22

23. REWARD!
23

24. LESSONS IN HUBRIS