Latest / Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering
How to Use Linux Server Namespaces for Process Isolation
In this episode, Lucas and Luna dive into the practical use of Linux namespaces for process isolation, going beyond the usual container talk. They focus on the mount namespace and how it can prevent a runaway process from clobbering your server's filesystem. You'll hear how a simple unshare command can give you a sandboxed view of the filesystem, and why pivot_root is the missing piece for truly isolated environments. They also touch on how systemd uses namespaces under the hood for service hardening, and how you can test it all safely on a throwaway VM. If you've ever wanted to understand…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.