Blog

A new home for shorter, less formal writing on server-side topics — Linux, networking, containers, Kubernetes, agent sandboxing, security, and more. Posts for exploring ideas rather than teaching them step by step.

Looking for older posts?

Check the iximiuz.com blog archive.

Category
Blog post

Are user namespaces good for your health?

At last, I ran into a take on user namespaces that resonates with my own view of the problem: Kubernetes Finally Has User Namespace Support. The Shared Kernel Problem Remains (and its spinoff on The New Stack) by Kaylin Trychon of Edera.

#userns#vulnerability#hypervisor