Linux namespace
A Linux namespace is a kernel mechanism that gives processes isolated views of selected system resources, such as processes, networks, or filesystem mounts.
Kubernetes in Action, Second Edition
A Linux namespace is a kernel mechanism that isolates a process's view of selected system resources from processes in other namespaces.
- How it is used
- Explains how containers get separate resource views and how selective namespace sharing lets Kubernetes containers work together in a pod.
- How deep it goes
- Defines namespace types and works through pod-sharing behavior, but stops short of kernel implementation details.
- Examples
- Uses shared pod networking and a Docker Desktop container joined to host namespaces for concrete illustrations.
- What you can do after
- Evaluate/understand it: distinguish what containers in one pod share, what remains separate, and why namespaces alone do not ensure complete isolation.
Read how Kubernetes in Action, Second Edition explains linux namespace →
Podman in Action: Secure, rootless containers for Kubernetes, microservices, and more
A Linux kernel isolation mechanism that provides a process with a separate view of selected system resources.
- How it is used
- Uses kernel namespaces to isolate container processes from host resources and from one another.
- How deep it goes
- Explains virtualized resource views and several namespace types, but defers detailed kernel configuration and runtime implementation.
- Examples
- Uses network, mount, PID, IPC, and user namespaces, plus the --privileged option as a security counterexample.
- What you can do after
- Evaluate container isolation boundaries and avoid disabling them unnecessarily with --privileged.
Related concepts
- containerused by · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.
- mount namespaceincludes · A mount namespace is a Linux namespace that isolates the filesystem mount points visible to processes.
- cgroupcontrasts with · A cgroup is a Linux kernel mechanism that groups processes to control, limit, isolate, and account for their resource usage.
- namespacecontrasts with · A namespace is a naming context or identifier space in which names are defined and resolved, distinguishing them from names in other contexts.
- user ID namespaceincludes · A user ID namespace is a Linux isolation mechanism that separates user and group identifiers and maps them between namespace and host contexts.
- UTS namespaceincludes · A UTS namespace is a Linux namespace that isolates the system hostname and NIS domain name visible to processes.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.