Container on Ricky

Containers From Scratch by Golang (feat. Liz Rice)

Wed, 10 Sep 2025 09:50:00 +0800

As we enhance the functionality of our small program, we will explore the following topics, allowing us to create a basic simulation of a non-production container environment.

UTS Namespace
Chroot
PID Namespace
Mount Namespace
Control Group
Rootless Container

Container security fundamentals

Wed, 04 Oct 2023 09:06:00 +0800

Containers from scratch

Thu, 24 Nov 2022 13:10:14 +0800

Containers from scratch

Container file systems

$ wget https://github.com/ericchiang/containers-from-scratch/releases/download/v0.1.0/rootfs.tar.gz
$ sha256sum rootfs.tar.gz
c79bfb46b9cf842055761a49161831aee8f4e667ad9e84ab57ab324a49bc828c rootfs.tar.gz
$ # tar needs sudo to create /dev files and setup file ownership
$ sudo tar -zxf rootfs.tar.gz
$ ls rootfs
bin dev home lib64 mnt proc run srv tmp var
boot etc lib media opt root sbin sys usr
$ ls -al rootfs/bin/ls
-rwxr-xr-x. 1 root root 118280 Mar 14 2015 rootfs/bin/ls

chroot

it allows us to restrict a process’ view of the file system. In this case, we’ll restrict our process to the “rootfs” directory then exec a shell.