Method and apparatus and computing device for creating a sandbox environment for plug-in operation

Abstract

The invention discloses a method, a device and a computing device for creating a sandbox environment for plug-in running. The method for creating a sandbox environment for plug-in operation of the present invention includes: creating a sandbox environment, mapping a local directory for each plug-in to the sandbox environment, and mapping the device management directory of the host machine to the sandbox environment; add different resource limits to different sandbox environments; load the plug-in process management; receive the message sent by the front end, the message contains the plug-in ID, the plug-in version, and pass it to the plug-in process management; through the plug-in The process management loads corresponding plug-ins, wherein only one master plug-in and the slave plug-ins that the master plug-in depends on are loaded in a sandbox environment. The solution of the present invention realizes the modular management and control of plug-in process resources, can realize complete management and control in the entire life cycle of the sandbox, and enables dynamic access to hardware resources, and limits the read and write speed of the disk and the uplink and downlink speed of the network .

Description

technical field [0001] The present invention relates to the technical field of computer browser plug-in operation, in particular to a method and apparatus for creating a sandbox environment for plug-in operation, a computing device and a readable storage medium. Background technique [0002] In the current practice, it is necessary to ensure the isolation of plug-in process management and plug-in security and resources. The existing technical solution is to isolate the plug-in process through Docker. Docker originated from Linux Container (LXC) technology and is the current mainstream virtualization container solution. It provides a set of standardized container solutions, the design diagram is as follows figure 1 shown. like figure 1 As shown, the host can manage plugins, and docker provides an interface for managing plugins. The local resource manager is responsible for managing the relationship between local resources and docker containers. Plug-in management and pl...

AI Technical Summary

Problems solved by technology

[0004] 1. As a general browser plug-in solution, different plug-in manufacturers and plug-in developers need different resources, permissions, and environments. However, the container environment created by Docker cannot be modified after the container is created. Therefore, the Docker solution In this context it becomes inflexible

[0005] 2. Plug-in process management and all loaded plug-ins run in a container environment. Although the environment is isolated from the host machine, complete environmental isolation between each plug-in is not achieved

[0006] 3. Unable to realize hot-swapping of hardware and dynamically read hardware resources (taking bank customers as an example, the plug-in system will require U-shield hot-swapping)

Images