Detecting and migrating a rogue user application to avoid functional safety interference

A system comprising:

• a memory;
• and
• a processing device, operatively coupled to the memory, to:
• allocate a first portion of system resources of a vehicle safety management (VSM) system to a functional safety application executing on a processing device of the VSM system, wherein the system resources comprise at least one of processing resources, memory resources, or networking resources;
• allocate a second portion of the system resources to a user application executing on the processing device of the VSM system;
• detect an interference event associated with the first portion of the system resources and the second portion of the system resources that degrades a performance of the functional safety application;
• identify, responsive to detecting the interference event, an entry point of the user application, the entry point comprising a location in the user application where execution begins and where commands associated with the user application are accessible;
• generate, based on the entry point, a container image comprising an isolated portion of the system resources, wherein to generate the container image, the processing device is further to assign different priority levels to the multiple layers and allocate different amounts of the isolated portion of the system resources to the multiple layers according to the different priority levels;
• and
• migrate the user application to the container image to prevent the interference event associated with the first portion of the system resources and the second portion of the system resources.

A non-transitory computer-readable medium storing instructions that, when execute by a processing device of a vehicle safety management (VSM) system, cause the processing device to:

• allocate a first portion of system resources of the VSM system to a functional safety application executing on a processing device of the VSM system, wherein the system resources comprise at least one of processing resources, memory resources, or networking resources;
• allocate a second portion of the system resources to a user application executing on the processing device of the VSM system;
• detect an interference event associated with the first portion of the system resources and the second portion of the system resources that degrades a performance of the functional safety application;
• identify, responsive to detecting the interference event, an entry point of the user application, the entry point comprising a location in the user application where execution begins and where commands associated with the user application are accessible;
• generate, based on the entry point, a container image comprising an isolated portion of the system resources, wherein to generate the container image, the processing device is further to assign different priority levels to the multiple layers and allocate different amounts of the isolated portion of the system resources to the multiple layers according to the different priority levels;
• and
• migrate, by the processing device, the user application to the container image to prevent the interference event associated with the first portion of the system resources and the second portion of the system resources.