Viewing profile — johnkoepi

"seccomp containers" sounds weird... like what is a container in Linux anyway :D

I love ideas behind Landlock but I don't fully see the struggle currently without taking into considerations issues with io_uring api. Seccomp nowadays with AppArmor|SElinux is eno…

way too different things, everyone using seccomp when they don't have AppArmor only profile. sometimes even do both.

+1

An example of debugging mount(2) issues when mounting sysfs filesystem inside of the user namespace to demonstrate practical usage of ftrace (perf) and eBPF (bpftrace) in addition …

> 3) Transferring data from one host to another when you need to bring up a stateful process does not scale. Above a few gigs, the transfer process creates significant load on both…