/limbo

example of running several processes with filesystem isolation using mount namespaces in kubernetes

Primary LanguageGo

Limbo

This project is a Kubernetes POC to validate how it is possible to isolate a mount point created in a user namespace from other processes running in the host system (the Pod).

Running the POC

Requirements

  • Docker CLI
  • Kubernetes running locally

This project uses Linux only capabilities that aren't available in Go sdk if you are on a MacOS or Windows system. The deploy.sh script will build the project inside a docker image and deploy it in your local kubernetes. Make sure your current kubectl context points to your local Kubernetes server before proceeding.

Reference: