In this post, I am going to share my journey as an LFX Mentee. I worked with the Podman Container Tools organization to solve a specific networking issue in Netavark using Rust. What is LFX Mentorship? It is a remote program organized by the Linux Foundation. It is designed to help people start contributing to…

Earlier this year, my colleague Jan Rodak worked on Accelerating Parallel Layer Removal. It worked out so well that we wanted to tackle the other side of the problem: Layer Creation. Layer creation is even slower than removal as we must write all data to disk and not just just unlink files so there is…

User namespaces and capabilities are important kernel functionality to make containers secure. They allow to better isolate containers and limit the privileges a container might have. A while back a user reported a bug where some odd behavior was noticed when namespaces are shared between containers which could lead to security problems. Lets take closer…
Sign up with your email address to receive updates by email from this website.