Managing containerized applications

A method of managing access to a plurality of applications capable of executing within a container provisioned on a computing device, the method comprising:

• receiving, at a control component of the container, a first communication for a first application in the plurality of applications capable of executing within the container, wherein the first communication is received via a first communications pathway implemented by the container, wherein the first communication is received by the container at a first communications interface of the container;
• determining, at the control component of the container, and based on an event mapping, whether the first communication relates to a permitted event in respect of the first application;
• and
• transmitting the first communication from the control component to the first application over a second communication pathway implemented by the container when it is determined that the first communication relates to a permitted event in respect of the first application, wherein the first communication is received by the first application at a second communications interface of the first application,
• wherein the second communications interface of the first application comprises a first portion and a second portion, the first portion being configured to facilitate communications between the first application and the first communications interface of the container, and the second portion being configured to facilitate communications between the first application and a respective communications interface of a second application executing within the container, wherein the respective communications interface of the second application comprises a third portion and a fourth portion, the third portion being configured to facilitate communications between the second application and the container, and the fourth portion being configured to facilitate communications between the second application and the first application;
• wherein the second portion and the fourth portion are configured to translate application data formats between the first application and the second application within the container.

A non-transitory computer-readable storage medium comprising computer-executable instructions which, when executed by a processor, cause a computing device to perform operations of managing access to a plurality of applications capable of executing within a container provisioned on a computing device, the operations comprising:

• receiving, at a first communications interface of the container, a first communication for execution by a first application in the plurality of applications capable of executing within the container, wherein the first communication is received from an on-device process via a first communication pathway using an inter-process communication framework provided by an operating system executing on the computing device, wherein the first communications interface is configured to facilitate communications between the container and on-device processes that are external to the container;
• sending, from the first communications interface of the container, the first communication to a second communications interface of the first application via a second communication pathway provided by the container, wherein the second communication pathway bypasses the inter-process communication framework, wherein the second communications interface of the first application comprises a first portion and a second portion, the first portion being configured to facilitate communications between the first application and the first communications interface of the container, and the second portion being configured to facilitate communications between the first application and a respective communications interface of a second application executing within the container, wherein the respective communications interface of the second application comprises a third portion and a fourth portion, the third portion being configured to facilitate communications between the second application and the container, and the fourth portion being configured to facilitate communications between the second application and the first application, wherein the second portion and the fourth portion are configured to translate application data formats between the first application and the second application within the container;
• receiving, at the first communications interface of the container, a response to the first communication from the second communications interface of the first application via the second communication pathway;
• and
• sending the response from the first communications interface of the container to the on-device process via the first communication pathway.

A non-transitory computer-readable storage medium comprising computer-executable instructions which, when executed by a processor, cause a computing device to perform operations managing access to a plurality of applications capable of executing within a container provisioned on a computing device, the operations comprising:

• receiving, at a control component of the container, a first communication for a first application in the plurality of applications capable of executing within the container, wherein the first communication is received via a first communications pathway implemented by the container, wherein the first communication is received by the container at a first communications interface of the container;
• determining, at the control component of the container, and based on an event mapping, whether the first communication relates to a permitted event in respect of the first application, wherein the first communication is received by the first application at a second communications interface of the first application;
• and
• transmitting the first communication from the control component to the first application over a second communication pathway implemented by the container when it is determined that the first communication relates to a permitted event in respect of the first application,
• wherein the second communications interface of the first application comprises a first portion and a second portion, the first portion being configured to facilitate communications between the first application and the first communications interface of the container, and the second portion being configured to facilitate communications between the first application and a respective communications interface of a second application executing within the container, wherein the respective communications interface of the second application comprises a third portion and a fourth portion, the third portion being configured to facilitate communications between the second application and the container, and the fourth portion being configured to facilitate communications between the second application and the first application, wherein the second portion and the fourth portion are configured to translate application data formats between the first application and the second application within the container.