seccomp - CI/CD用語集の定義
seccomp（secure computing mode）は、カーネルフィルタを介してプロセスが呼び出せるsyscallの集合を制限し、containerの攻撃対象領域を削減します。container runtimeはデフォルトのseccomp profileを同梱しています。
関連ガイド
Linux Capabilities - CI/CD Glossary DefinitionLinux capabilities split root’s all-or-nothing power into discrete privileges, so a container can be granted…
Rootless Containers - CI/CD Glossary DefinitionRootless containers run the runtime and workload as an unprivileged user via user namespaces, so a container…
containerd - CI/CD Glossary Definitioncontainerd is the standard container runtime that handles image transfer, storage, and execution, used under…