List of references
- http://man7.org/linux/man-pages/man7/namespaces.7.html6
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html/overview_of_containers_in_red_hat_systems/introduction_to_linux_containers#linux_containers_architecture
- http://man7.org/linux/man-pages/man7/mount_namespaces.7.html
- http://man7.org/linux/man-pages/man7/user_namespaces.7.html
- http://man7.org/linux/man-pages/man7/pid_namespaces.7.html
- http://man7.org/linux/man-pages/man7/capabilities.7.html
- https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities
- https://docs.oracle.com/cd/E37670_01/E75728/html/section_mf3_vb5_dq.html
- https://www.cloudsigma.com/manage-docker-resources-with-cgroups/
- http://manpages.ubuntu.com/manpages/xenial/en/man7/apparmor.7.html
- https://www.digitalocean.com/community/tutorials/how-to-create-an-apparmor-profile-for-nginx-on-ubuntu-14-04
- https://www.kernel.org/doc/Documentation/security/LSM.txt
- http://securingthestack.com/linux/
- https://opensource.com/resources/what-are-linux-containers
Resources
- https://www.youtube.com/playlist?list=PLbzoR-pLrL6pq6qCHZUuhbXsTsyz1N1c0
- https://www.slideshare.net/jpetazzo/anatomy-of-a-container-namespaces-cgroups-some-filesystem-magic-linuxcon
- http://contained.af/
- https://www.linux.com/learn/overview-linux-kernel-security-features
- https://www.cl.cam.ac.uk/~lc525/files/Linux_Containers.pdf
- https://docs.docker.com/engine/security/security/
- https://mobyproject.org/
- https://github.com/linuxkit/linuxkit
- http://wiki.apparmor.net/index.php/Main_Page
- https://en.wikipedia.org/wiki/Seccomp
- http://subuser.org/
- https://www.youtube.com/watch?v=BfFBDDQtSlk
- https://www.coursera.org/learn/embedded-operating-system/lecture/UhvJm/module-3-lecture-2-linux-kernel-functions-and-advantages
- https://sysadmincasts.com/episodes/14-introduction-to-linux-control-groups-cgroups
- https://speakerdeck.com/vpetersson/an-introduction-to-cgroups-and-cgroupspy
- https://events.linuxfoundation.org/sites/events/files/slides/linux_kernel_security_linuxconeu2016.pdf
- https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
- http://training.play-with-docker.com/
- https://www.katacoda.com/
- https://linuxcontainers.org/
- https://www.youtube.com/watch?v=1qlLUf7KtAw
- https://github.com/jessfraz/bane
- https://www.youtube.com/watch?v=Cd4JU7qzYbE
- https://wiki.gnome.org/Projects/SandboxedApps
- https://github.com/projectatomic/bubblewrap
- https://subgraph.com