TinyContainer: Container Runtime Middleware Enabling Multi-tenant Microcontrollers with Built-in Security
TinyContainer:支持多租户微控制器且内置安全的容器运行时中间件
Bastien Buil, Chrystel Gaber, Samuel Legouix, Emmanuel Baccelli, Samia Bouzefrane
AI总结 提出轻量级容器管理中间件TinyContainer,通过元数据驱动实现可配置调度和细粒度访问控制,支持多运行时抽象层,在Cortex-M微控制器上以每调用4ms开销实现多租户隔离和TinyML用例。
详情
- Journal ref
- ACM WiSec 2026
针对资源受限设备的软件容器化技术使得多租户微控制器成为可能,允许运行具有不同权限级别的多个应用程序。然而,当前解决方案缺乏对容器调度和容器访问主机资源权限的运行时配置能力,这限制了受限容器化在动态异构环境中的适用性。本文介绍TinyContainer,一种专为多租户微控制器设计的轻量级软件容器管理中间件。TinyContainer通过元数据驱动方法提供每个容器的可配置调度和对主机资源的细粒度访问控制,并通过运行时抽象层支持多种运行时。我们使用小型WebAssembly运行时CS4WAMR和常见RTOS RIOT OS分析了TinyContainer的性能。报告了基于各种Cortex-M微控制器的流行物联网板上的实验。我们展示了TinyContainer带来的端点系统,允许调节容器对主机资源的访问,并以每调用最多4ms的开销向容器提供主机服务。特别地,我们展示了一个TinyML用例,其中容器保留数据和模型权重,而模型推理委托给本地主机RTOS服务。
Software containerization technologies for resource-limited devices enable multi-tenant microcontrollers, which allow running multiple applications with different permission levels. However, current solutions lack run time configuration over various settings on container scheduling and container permissions to host resources. This limits the applicability of constrained containerization in dynamic and heterogeneous environments. This paper introduces TinyContainer, a lightweight software container management middleware designed for multi-tenant microcontrollers. TinyContainer provides per-container configurable scheduling and fine-grained access control to host resources through a metadata-driven approach, supporting multiple runtimes via a runtime abstraction layer. We analyze the performance of TinyContainer with a small WebAssembly runtime, CS4WAMR, and RIOT OS, a common RTOS. We report on experiments using popular IoT boards based on various Cortex-M microcontrollers. We show the endpoint system brought by TinyContainer allowing to regulate access of containers to host resources and provide host services to containers with an overhead of up to 4 ms per call. In particular, we showcase a TinyML use case, whereby containers retain data and model weights, while model inference is delegated to native host RTOS services.