Privileged semi-containerized system services for developing and deploying embedded applications

Abstract

Disclosed subject matter encompasses method operations performed by an embedded device. Exemplary deployments may include a BMC as the embedded device, but the embedded device is expressly not limited to BMCs. Disclosed subject matter enables partially-sandboxed execution environments (SSEEs) with an auditable framework supporting unrestricted or restricted system access via privilege elevation capabilities not generally permitted within conventional container solutions. Functional modularity is implemented without incurring the substantial overhead inherent in fully modular and isolated containers. Disclosed SSEEs require no intermediate runtime or the corresponding overhead. Disclosed subject matter may leverage sandboxing functionality native to at least some software package management utilities (SPMUs) including, as a non-limiting example, a Flatpak utility suitable for use in embodiments employing a Linux OS, to achieve footprint-efficient SSEEs.

Dependencies are inferred from the claim text.