Tag: #seccomp
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 2 posts
Container & Docker Internals Deep Dive — Namespace, cgroups, OverlayFS, seccomp, Capabilities and Kubernetes (2025)
"A container is not a lightweight VM." Behind a single docker run there are 7 Linux namespaces, cgroups v2, OverlayFS layers, seccomp filters, and Linux capabilities. From LXC in 2008 to Docker in 2013, OCI standardizati
2026-04-15 · 12 min read #docker#container#namespace#cgroups#overlayfsSELinux, seccomp, Device Access: How KubeVirt Maintains Security Boundaries
Analyzes how KubeVirt combines SELinux, seccomp, cgroup device rules, and privileged helpers to simultaneously maintain VM execution and security boundaries, based on internal code.
2026-03-20 · 6 min read #architecture#kubevirt#security#selinux#seccomp