InsideDocker Filters Syscalls by Default. Kubernetes Doesn't.
Topic 25 of my Kubernetes journey: use seccomp to block the syscalls a container never needs, why Kubernetes ships it off, and how to turn it on.
Topic 25 of my Kubernetes journey: use seccomp to block the syscalls a container never needs, why Kubernetes ships it off, and how to turn it on.
Topic 24 of my Kubernetes journey: what a Linux syscall is, why containers share one kernel, and how to watch them live with strace and Aqua Tracee (eBPF).
A beginner-friendly introduction to Kubernetes (K8s): what it is, why it's used, and the start of my Kubernetes security journey.