Skip to content

Instantly share code, notes, and snippets.

View woshahua's full-sized avatar
On vacation

Fat Shady woshahua

On vacation
  • freee
  • Tokyo, Japan
View GitHub Profile
woshahua /
Created December 15, 2019 05:51
docker making tutorial
  • clone一个namespace隔离的进程???
  • fork什么意思


  • MSNOEXEC no other application is allowed to run inside this system
  • MS_NOSUID not allowed to do set-user-ID or set-group-ID
  • MS_NODEV this is a default parameter set for linux


  • what is the point, this is like run the command inside the system ?
  1. the first process inside the container, which PID = 1 is the process init