Fun-reliable side-channels for cross-container communication

Introduction While exploring the Linux kernel we discovered a fun side-channel that allows for cross-container communication in the most common, default container deployment scenarios on modern kernels. This is cool because it doesn’t require sharing volume mounts, nor does it involve modifying any of the default namespaces ( NET , PID , IPC , etc.), or adding special privileges (no new CAP_…