ThinkerQAQ

6.Isolation & Containers

Operating Systems / Linux · 3 notes

  1. 6.1 Linux Namespaceshistorical

    Linux namespaces as process-visible resource isolation for mount, PID, network, IPC, UTS, user, cgroup, and time domains.

  2. 6.2 Linux Control Groups (cgroups)historical

    cgroup v2 resource accounting and control for CPU, memory, I/O, process counts, pressure, and container workloads.

  3. chroothistorical

    Changing a process's filesystem root and understanding why chroot alone is not a security container.