Dropbear

Tag: system administration

  • Devices with cgroup v2

    —

    by

    dropbear
    in

    I was curious to find out how containers have restricted access to devices. For cgroup v1 this is simple, but cgroup v2 uses eBPF. Find out what device access a container has with 3 easy and 1 difficult steps.