IPC solution for a process manager
I'm at day 7 of working on Pup (https://github.com/hexagon/pup) - a universal process manager run by Deno. Next step towards
1.0.01.0.0 is to allow one instance of pup to restart a process of another instance. Something likepuppup - Boots up the process ecosystem defined in pup.jsonpup.json of the current directorythen
pup --restart --id task-1pup --restart --id task-1 - Restart process named task-1task-1 in the main process, print results, and exit.What are the options on this in Deno, while keeping everything nice and secure. Is there a stable IPC solution ready for Deno yet? Security considerations?
The first that comes to mind is to use unix sockets, with maybe a common secret key defined in
pup.jsonpup.json, that way, even if a evil process have access to the unix socket, it won't be able to command processes without the secret key. This would make the actual file permissions (read) to pup.jsonpup.json control who can control the process manager. Of cours normal unix socket permissions would be handled in some way. Good or bad? Cross platform considerations? Is the secret totally useless?
