Linux Capabilities - CI/CD Glossary Definition
Linux capabilities partition the privileges of root into distinct units (e.g. CAP_NET_BIND_SERVICE), letting containers drop everything and add back only what they truly require.
Related guides
seccomp - CI/CD Glossary Definitionseccomp filters which Linux syscalls a process may make, shrinking a container’s kernel attack surface. CI sa…
Rootless Containers - CI/CD Glossary DefinitionRootless containers run the runtime and workload as an unprivileged user via user namespaces, so a container…
containerd - CI/CD Glossary Definitioncontainerd is the standard container runtime that handles image transfer, storage, and execution, used under…