python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - linux-namespaces

Reuse namespaces of process started by bubblewrap

Starting a shell with this: bwrap --unshare-pid --unshare-user --dev-bind / / bash In another shell on the host we can see this with lsns: 4026532550 user 2 1799976 user bwrap --unshare-pid --...
test-img

Jallan

linux-namespaces

rootless

bubblewrap

nsenter

Votes: 0

Answers: 1

Latest Answer

Like this: nsenter -U --preserve-credentials -m -p -t 1799976 Where 1799976 is the PID of the process that's currently in that namespace. If you don't want to enter the mount or PID namespace, then l...
test-img

Joseph Sible-Reinstate Monica

why sysctl net.ipv4.tcp_timestamps works different in different kernel on container

I upgraded a machine's kernel from 3.10.0 to 4.20.13 and left else unchanged, but net.ipv4.tcp_timestamps acts different on docker after upgrading as showed in below picture. I am guessing this parame...
test-img

AnonymousX

tcp

linux-kernel

linux-namespaces

Votes: 0

Answers: 1

Latest Answer

I found it, it's introduced in this commit tcp: Namespaceify sysctl_tcp_timestamps, and released in kernel version 4.13, just between 3.10 and 4.20.
test-img

AnonymousX

Can't enter mount namespace created by a setuid process

A root-owned setuid bit daemon switches back to the real user and creates a mount namespace. A user-owned executable with CAP_SYS_ADMIN and CAP_SYS_CHROOT bits set tries to enter that namespace and fa...
test-img

Velkan

linux

setuid

linux-namespaces

Votes: 0

Answers: 1

Latest Answer

Try using: sudo setcap cap_sys_admin,cap_sys_chroot,cap_sys_ptrace=ep ./client It looks like this detail of requiring the cap_sys_ptrace capability is buried in the kernel patch in a code comment: + ...
test-img

Tinkerer

ctrl+c can not interrupt process in new namespace by 'sudo unshare -fp bash'

run bash in a new namespace with unshare pid $ sudo unshare -fp bash then run cat, and try to interrupt by press ctrl+c $ cat ^C cat is not killed. it seems cat not receive the SIGINT signal, but pr...
test-img

yuanjianpeng

linux

linux-namespaces

Votes: 0

Answers: 1

Latest Answer

I write a helper command to do a fork, then unshare don't need the -f option. #include <stdio.h> #include <string.h> #include <errno.h> #include <unistd.h> #include <sys/wai...
test-img

yuanjianpeng

Posts

Questions

Blogs

Jobs