Latest / Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering
Linux Server User Namespaces for Container Security
User namespaces are a powerful Linux kernel feature that lets containers run as ‘root’ inside their namespace while actually running as an unprivileged user on the host. In this episode, Lucas and Luna walk through a real-world scenario: an attacker who compromises a containerized web app and tries to escape to the host. With user namespace mapping, the attacker’s root privileges inside the container are worthless outside it. They explain how UID 0 inside maps to UID 100000 outside, why this breaks privilege escalation, and how to configure user namespaces with Podman and runc. They also…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.