An Novel Architecture and Inter-process Communication Scheme to Adapt Chromium Based on Docker Container

摘要

In this paper, firstly we propose a novel architecture called DBCSUEE to adapt embedded Chromium browser with Docker container virtualization as its sandboxing mechanism to isolate processes. Using this kind of container-level virtualization in browsers guarantees web applications operate in a secure environment, and gives the browser a more efficient resource management scheme applicable to multi-application situation. Secondly, when implementing the scheme, communication among applications running in their own containers becomes a problem and needs to be solved. Chromium's existing inter-process communication mechanism cannot be used. Thus, we propose a new communication scheme based on named pipe, which allows two web applications to communicate with each other without closing their containers.