lundi 8 octobre 2018

How are requests to /dev/(u)random etc. handled in Docker?

for documentation purposes on our project I am looking for the following information:

We are using Docker to deploy various applications which require entropy for SSL/TLS and other stuff. These applications may use /dev/random, /dev/random, getrandom(2), etc.. I would like to know how these requests are handled in Docker containers as opposed to regular virtual machines.

So far I have (cursorily) looked into libcontainer and runC. Unfortunately I have not found any answers to my question, although I do have a gut feeling that these requests are passed through to the equivalent call on the host.

Can you lead me to any documentation supporting this claim, or did I get it wrong and these requests are actually handled differently?




Aucun commentaire:

Enregistrer un commentaire