Skip to content

Linux Capabilities - CI/CD用語集の定義

Linux capabilitiesはrootの権限を個別の単位（例：CAP_NET_BIND_SERVICE）に分割し、containerがすべてを削除して本当に必要なものだけを追加し直せるようにします。

関連ガイド

seccomp - CI/CD Glossary Definitionseccomp filters which Linux syscalls a process may make, shrinking a container’s kernel attack surface. CI sa… Rootless Containers - CI/CD Glossary DefinitionRootless containers run the runtime and workload as an unprivileged user via user namespaces, so a container… containerd - CI/CD Glossary Definitioncontainerd is the standard container runtime that handles image transfer, storage, and execution, used under…