Skip to content

Instantly share code, notes, and snippets.

Avatar
💭
I may be slow to respond.

hangao woshahua

💭
I may be slow to respond.
View GitHub Profile
@woshahua
woshahua / docker.md
Created Dec 15, 2019
docker making tutorial
View docker.md
  • clone一个namespace隔离的进程???
  • fork什么意思

MountFlag

  • MSNOEXEC no other application is allowed to run inside this system
  • MS_NOSUID not allowed to do set-user-ID or set-group-ID
  • MS_NODEV this is a default parameter set for linux

syscall.Exec

  • what is the point, this is like run the command inside the system ?
  1. the first process inside the container, which PID = 1 is the process init
You can’t perform that action at this time.