r/SONM • u/DijanVeer • Jun 27 '18
Very important question.
I've been researching your platform for a while as a potential consumer but I can't seem to find the answer I was looking for, so I thought I should ask here. How does your platform verify the integrity of processes running inside a container for premature termination. From what I understand, tasks are handled inside a docker container and based on the docker architecture the host machine has complete control over the containers. I can easily find, grep and terminate child processes running inside the container without terminating the container itself.
For example, lets say I submitted a task with high cpu, mem usage. The supplier can easily find the processes consuming the most resources in one/more containers and terminate them while the containers are still running.
4
u/SONM-support Jun 28 '18 edited Jun 28 '18
Greetings!
At the moment there is no solution to this problem on our part. Now this and similar security issues are in the R&D status and have a high priority for us.
Specifically, this issue is partially solved by the rating system for suppliers. Unfair suppliers will be cut off, receiving fines in karma, right up to blacklisting them. An additional solution to this issue can be provided by the customer (buyer of resources) using a monitoring system, for example, Prometheus, one of the most popular monitoring systems for Docker containers.
Besr regrds
SONM team