Fat Shady woshahua

## docker.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                woshahua
                / docker.md
            
            
              Created
              December 15, 2019 05:51
            
              
                docker making tutorial
              
          
clone一个namespace隔离的进程？？？
fork什么意思

MountFlag


MSNOEXEC no other application is allowed to run inside this system
MS_NOSUID not allowed to do set-user-ID or set-group-ID
MS_NODEV this is a default parameter set for linux

syscall.Exec


what is the point, this is like run the command inside the system ?


the first process inside the container, which PID = 1 is the process init