Stories
Slash Boxes
Comments

SoylentNews is people

posted by mrpg on Wednesday May 30 2018, @12:10AM   Printer-friendly
from the one-process-to-rule-them-all dept.

Systemd Introduces "Portable Services" Functionality, Similar To Containers

Lennart is at it again, making complicated things that nobody asked for.

The past several months Lennart Poettering has been working on a "portable services" concept and that big ticket new feature has now landed in Systemd. Portable services are akin to containers but different.

[...] A portable service is ultimately just an OS tree, either inside of a directory tree, or inside a raw disk image containing a Linux file system. This tree is called the "image". It can be "attached" or "detached" from the system. When "attached" specific systemd units from the image are made available on the host system, then behaving pretty much exactly like locally installed system services. When "detached" these units are removed again from the host, leaving no artifacts around (except maybe messages they might have logged).

[...] The primary focus use-case of "portable services" is to extend the host system with encapsulated extensions, but provide almost full integration with the rest of the system, though possibly restricted by effective security knobs. This focus includes system extensions otherwise sometimes called "super-privileged containers".


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Wednesday May 30 2018, @01:02PM

    by Anonymous Coward on Wednesday May 30 2018, @01:02PM (#686235)

    So what is the point in installing apache if you already pawned the host?. I agree that not necessarily systemd is the one to blame for the exploit, but installing compromisable software that never been installed in the host, doesn't makes any sense, even more if you want to stay low or unnoticed.