Method and device for creating sandbox environment for plug-in operation, and computing equipment

Abstract

The invention discloses a method and device for creating a sandbox environment for plug-in operation, and computing equipment. The method for creating the sandbox environment for plug-in operation comprises: creating the sandbox environment, mapping a local directory for each plug-in into the sandbox environment, and mapping an equipment management directory of a host machine into the sandbox environment; adding different resource restrictions to different sandbox environments; loading plug-in process management; receiving a message transmitted by a front end, the message including the ID of the plug-in and the version of the plug-in, and transmitting the message to the plug-in process management; and managing and loading the corresponding plug-ins through the plug-in process, wherein only one master plug-in and the slave plug-ins on which the master plug-in depends are loaded in one sandbox environment. According to the scheme, modular management and control of plug-in process resources are achieved, complete management and control can be achieved in the whole life cycle of the sandbox, hardware resources can be dynamically accessed, and the disk read-write speed and the network uplink and downlink speed are limited.

Description

technical field [0001] The invention relates to the technical field of computer browser plug-in running, in particular to a method and device for creating a sandbox environment for plug-in running, a computing device and a readable storage medium. Background technique [0002] In the current practice, it is necessary to ensure the security and resource isolation of plug-in process management and plug-in. The existing technical solution is to isolate the plug-in process through Docker. Docker originated from the Linux Container (LXC) technology and is currently the mainstream virtualization container solution. It provides a set of standardized container solutions, the design diagram is as follows figure 1 shown. Such as figure 1 As shown, the host can manage plug-ins, and docker provides an interface for managing plug-ins. The local resource manager is responsible for managing the relationship between local resources and docker containers. The plug-in management and plu...

AI Technical Summary

Problems solved by technology

[0004] 1. As a general browser plug-in solution, different plug-in manufacturers and plug-in developers need different resources, permissions, and environments. However, the container environment created by Docker cannot be modified after the container is created. Therefore, the Docker solution In this context it becomes inflexible

[0005] 2. Plug-in process management and all loaded plug-ins run in a container environment. Although the environment is isolated from the host machine, complete environmental isolation between each plug-in is not achieved

[0006] 3. Unable to realize hot-swapping of hardware and dynamically read hardware resources (taking bank customers as an example, the plug-in system will require U-shield hot-swapping)

Images