Linux namespaces
AssessTechniques
Linux kernel isolation primitives for separating process, network, mount, and user environments.
Why it's here
Placed in Assess: 2 article(s) of evidence from 1 source(s), led by open-source activity, with 2 in the last 30 days. Confidence 32%.
Evidence (2)
- 4Hacker News·10/5/2026open_sourceMinimal Linux container implementation in 500 lines
This Hacker News item highlights a literate program that implements a minimal Linux container runtime in roughly 500 lines of code, focusing on the kernel primitives needed to run untrusted code safely. It discusses namespaces, capabilities, cgroups, seccomp, and setrlimit, with emphasis on which permissions are unsafe and how to restrict them.
- 6Hacker News·9/22/2026open_sourceDrop: a rootless Linux sandbox with gVisor support
Drop is a new sandboxing tool for running third-party programs in isolated Linux environments without root access. It uses Linux namespaces for isolation and can optionally add gVisor to reduce the risk of host-kernel exploitation during escape attempts.