Junior
On what basic components is Linux architecture based?
sobes.tech AI
Answer from AI
- Namespaces: Process isolation.
pid: Isolates process identifiers.net: Isolates network interfaces and routing rules.mnt: Isolates filesystem mount points.uts: Isolates hostname and domain name.ipc: Isolates inter-process communication.user: Isolates user and group identifiers.
- Control groups (cgroups): Limiting and controlling resources (CPU, memory, I/O, network) for groups of processes.
- Managing resource allocation among containers.
- Monitoring resource usage.
- Access control.
- Union Filesystem (UnionFS/OverlayFS): Combining multiple directories into a single logical filesystem.
- Allows creating layered images, where each layer represents a set of changes.
- Efficient use of disk space when storing and distributing images.
- Rapid creation of new containers from existing images.
- Seccomp (Secure Computing Mode): Restricts system calls that a process can make.
- Enhances security by reducing the attack surface.
- Allows defining a set of permitted system calls for a container.
- AppArmor/SELinux: Security profiles that restrict process capabilities based on policies.
- Provide an additional layer of protection by controlling access to files, networks, and other resources.
- AppArmor uses path-based rules, SELinux uses label-based policies.