GitHub/quartz
1
0
Fork 2
mirror of https://github.com/jackyzha0/quartz.git synced 2025-12-25 05:44:06 -06:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
76f83f4681
quartz/content/Linux Kernel also has namespaces for isolation.md
Mischa van den Burg 72d1d77243 Automated commit at Thu May 23 09:30:00 CEST 2024
2024-05-23 09:30:00 +02:00

675 B
Raw Blame History

The Linux Kernel has a way to isolate processes, which can be used to isolate containers.

You can limit PID from seeing other processes. This is called the PID namespace.

The mount namespace restricts access to /mnt and root filesystem.

Networking can be isolated in the networking namespace. Can be configured to only access certain network devices and limit the visibility of traffic or endpoints.

User IDs can be different between namespaces. The root user (0) can be different between namespaces.

Links:

from:: CKS Video Course related research:: What Have Namespaces Done for You Lately qm related to:: Container Isolation

202403241155