Oct 12, 2026
•
21 min read
Five Namespaces and a Veto
What PID, mount, UTS, IPC, and user namespaces each actually buy you, why pivot_root beats chroot, how three lines of /proc writes make a container rootless — and the day Ubuntu 24.04's AppArmor vetoed a sethostname my user namespace was entitled to make.
C
Linux Internals
Containers
Namespaces
AppArmor