Главная
Study mode:
on
1
Intro
2
Load kernel modules
3
Mounting from inside containers
4
File systems
5
Ptrace
6
Fineman algorithm
7
P trace
8
Do stuff
9
Example
10
Implementation Issues
Description:
Explore a kernel patchset for forwarding syscalls to userspace in this 23-minute conference talk from linux.conf.au. Learn how this development allows containers to safely perform actions previously restricted to root on the host, such as loading kernel modules and mounting arbitrary filesystems. Discover the implementation details, including the use of ptrace and the Fineman algorithm, and understand the potential impact on container security and functionality. Gain insights into the challenges and issues faced during implementation, and see practical examples of how this technology can bridge the gap between container and host capabilities.

Forwarding Syscalls to Userspace

linux.conf.au
Add to list