From the course: Exploring Linux Internals: Advanced Insights and Practical Applications

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Managing Linux process resource allocation

Managing Linux process resource allocation - Linux Tutorial

From the course: Exploring Linux Internals: Advanced Insights and Practical Applications

Start my 1-month free trial Buy for my team

Managing Linux process resource allocation

“

- So the next step in the development that led towards containers was a namespace. So the idea to restrict application access to specific resources in a chroot jail worked pretty well. And this concept has further been developed into namespaces. Namespaces provide strict isolation for specific areas related to running processes, like cgroups for system resources, IPC for inter-process communication, networking to create private and dedicated networks, The mount namespace, which is the new interpretation of the chrooted directory, the pid namespace that ensures that a process can only see itself and related processes, and nothing else, and the user namespace which provides for isolated users and which happens to be the only namespace that can be created without CAP_SYS_ADMIN, which is equivalent to administrative privileges. And last, there is UST, which is providing hostname and obsolete network information services domain name. If you want to monitor current namespace usage, you can…

Contents