DRIVE: Dockerfile Rule Mining and Violation Detection

doi:10.1145/3617173

DRIVE: Dockerfile Rule Mining and Violation Detection

2023-12-21

0

OA

AI

DOI：10.1145/3617173

Original request for help

Save

Abstract

En 中文

A Dockerfile defines a set of instructions to build Docker images, which can then be instantiated to support containerized applications. Recent studies have revealed a considerable amount of quality issues with Dockerfiles. In this article, we propose a novel approach, Dockerfiles Rule mIning and Violation dEtection (DRIVE), to mine implicit rules and detect potential violations of such rules in Dockerfiles. DRIVE first parses Dockerfiles and transforms them to an intermediate representation. It then leverages an efficient sequential pattern mining algorithm to extract potential patterns. With heuristic-based reduction and moderate human intervention, potential rules are identified, which can then be utilized to detect potential violations of Dockerfiles. DRIVE identifies 34 semantic rules and 19 syntactic rules including 9 new semantic rules that have not been reported elsewhere. Extensive experiments on real-world Dockerfiles demonstrate the efficacy of our approach.

Keywords:

Docker

dockerfile

pattern mining

configuration files

violation detection

DRIVE: Dockerfile Rule Mining and Violation Detection

Abstract

Journal

Organization