# Device Plugins Kubernetes [Device Plugins][0] are processes that map device nodes into unprivileged containers. They provide an alternative to manually bind-mounting devices using pod volumes, which typically requires granting container processes more privileges than they would otherwise need. ## `fuse-device-plugin` The [fuse-device-plugin][1] is a simple plugin that maps the `/dev/fuse` device node into a container. This device node is required in order to use [FUSE][2] filesystems. [Buildah][3], for example, used an FUSE implementation of OverlayFS when building container images in an unprivileged container. As of October 2023, Upsteam development of the `fuse-device-plugin` appears to have stalled, and its "official" container image is several years old at this point. While the project itself is simple and probably does not need much maintenance, running a container based on an operating system that old is quite dangerous. As such, I've created created [my own container image][4] for it that gets rebuilt and updated automatically. [0]: https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/ [1]: https://github.com/kuberenetes-learning-group/fuse-device-plugin/tree/master [2]: https://en.wikipedia.org/wiki/Filesystem_in_Userspace [3]: https://buildah.io/ [4]: https://git.pyrocufflink.net/ContainerImages/fuse-device-plugin