I shall look into nsenter. I have never actually used it. It may cover this use case. As for the status quo, I spend a lot of time extracting dumps from things

I shall look into nsenter. I have never actually used it. It may cover this use case. As for the status quo, I spend a lot of time extracting dumps from things in containers and debugging weird issues which is really really difficult without the ability to install any tools on the container at will. When done, we blast the container and let kubernetes reschedule a new one, disposing of all tools and state. On bloat, mine are sitting on top of a debian container layer, mostly because it’s a hell of a lot easier dealing with some dynamic libraries than fecking around with static linking stuff and copying dependencies into a minimalist container. Edit: There is overlap between these two things which nsenter may not be able to solve looking at what I am reading.