Listing all mounts in all mount namespaces
Introduction
Personal blog of Christian Brauner
Latest posts
Mounting into mount namespaces
Introduction
An excursion into a mount propagation bug
Introduction
Managing a kernel patch series with b4
This is a (live-[?])blog about managing a patch series solely with b4. It’s “live” as I’m writing this down while fumbling my way through this adventure. No corrections other than grammer and spelling (but no guarantees for the correctness of either).
The Seccomp Notifier - Cranking up the crazy with bpf()
In my last article I looked at the seccomp notifier in detail and how it allows us to make unprivileged containers way more capable (Sorry, kernel joke.). This is the (very) crazy (but very short) sequel. (Sorry Jon, no novella this time. :))
The Seccomp Notifier - New Frontiers in Unprivileged Container Development
Introduction
Slides for Kernel Recipes, Paris 2019: pidfd: Process file descriptors on Linux
Slides (pdf)
Slides for Open Source Summit (OSS) North America, San Diego 2019: New Container Kernel Features
Slides
Linux Kernel VFSisms
Introduction
Runtimes And the Curse of the Privileged Container
Introduction (CVE-2019-5736)