SRE

Observability, error budgets and incident analysis — with numbers you can check, rather than slogans about culture.

Sections: 1
Articles: 1
SOURCES: 9

Difficulty

1 article · matching

Sections

Articles

IntermediatePublishedContainer escape: how attackers reach the host, and how to close itA container is a process in its own namespaces on a kernel shared with the host. Most "escapes" are not a broken boundary at all — they are handed keys: access to the daemon, a mounted socket, the --privileged flag. Real escapes through a runtime or kernel bug are rarer but worse. Here are both classes, and what defends against each.containersdockersecurityisolationprivilege-escalation20 MIN9 SOURCESRead →

Recommended order

No prerequisites are declared between the materials in this section: they do not build on one another, and the order is yours to choose.

Can be read on their own: Container escape: how attackers reach the host, and how to close it

Knowledge graph

NON-LINEAR · PREREQUISITE AWARE

Topics are connected, and the connections here were not drawn by hand — they were counted: every article states what it builds on and what it sits next to, and the picture is assembled from those statements. A dashed circle is a topic the articles already call related but that has not been written yet.

1 node · 0 edges

No connections: sandbox-isolation

No connections yet: no article in this domain names another as related.