Linux Capabilities - Definição do Glossário de CI/CD
As Linux capabilities particionam os privilégios do root em unidades distintas (por exemplo CAP_NET_BIND_SERVICE), permitindo que containers descartem tudo e adicionem de volta apenas o que realmente precisam.
Guias relacionados
seccomp - CI/CD Glossary Definitionseccomp filters which Linux syscalls a process may make, shrinking a container’s kernel attack surface. CI sa…
Rootless Containers - CI/CD Glossary DefinitionRootless containers run the runtime and workload as an unprivileged user via user namespaces, so a container…
containerd - CI/CD Glossary Definitioncontainerd is the standard container runtime that handles image transfer, storage, and execution, used under…