johnkoepi

4 ms·

1. 1.▲
   by johnkoepi 3y ago

   "seccomp containers" sounds weird... like what is a container in Linux anyway :D
2. 2.▲
   by johnkoepi 3y ago

   I love ideas behind Landlock but I don't fully see the struggle currently without taking into considerations issues with io_uring api. Seccomp nowadays with AppArmor|SElinux is enough even for Nested rootless containers. Nested even in
3. 3.▲
   by johnkoepi 3y ago

   way too different things, everyone using seccomp when they don't have AppArmor only profile. sometimes even do both.
4. 4.▲
   by johnkoepi 3y ago

   +1
5. 5.▲
   How to debug Linux syscalls with ftrace and eBPF(sitano.github.io)

   6 points by johnkoepi 3y ago|1 comments
6. 6.▲
   by johnkoepi 3y ago

   An example of debugging mount(2) issues when mounting sysfs filesystem inside of the user namespace to demonstrate practical usage of ftrace (perf) and eBPF (bpftrace) in addition to reading of the Kernel source code for debugging syscalls
7. 7.▲
   by johnkoepi 10y ago

   > 3) Transferring data from one host to another when you need to bring up a stateful process does not scale. Above a few gigs, the transfer process creates significant load on both the source and destination host, and will easily saturat