Skip to content

Instantly share code, notes, and snippets.

I may be slow to respond.

hangao woshahua

I may be slow to respond.
View GitHub Profile
woshahua /
Created Dec 15, 2019
docker making tutorial
  • clone一个namespace隔离的进程???
  • fork什么意思


  • MSNOEXEC no other application is allowed to run inside this system
  • MS_NOSUID not allowed to do set-user-ID or set-group-ID
  • MS_NODEV this is a default parameter set for linux


  • what is the point, this is like run the command inside the system ?
  1. the first process inside the container, which PID = 1 is the process init
You can’t perform that action at this time.