Pid namespace
A PID namespace is a Linux namespace that isolates process identifiers and the visible process hierarchy.
Kubernetes in Action, Second Edition
A PID namespace is a Linux isolation scope that gives processes an isolated view of process identifiers and process hierarchy.
- How it is used
- Uses process isolation to let containers and pods control which processes they can see and signal.
- How deep it goes
- Explains namespace visibility, dual PIDs, process trees, and pod sharing, but does not detail kernel implementation.
- Examples
- Demonstrates container and host ps output, Docker shells, ephemeral debugging containers, and shareProcessNamespace manifests.
- What you can do after
- Diagnose process visibility by comparing container and host ps output, or configure pod-wide visibility for debugging.
Read how Kubernetes in Action, Second Edition explains pid namespace →
Podman in Action: Secure, rootless containers for Kubernetes, microservices, and more
A PID namespace is a Linux namespace that isolates process identifiers and the visible process tree.
- How it is used
- Uses process-tree isolation to reduce host visibility for Podman containers.
- How deep it goes
- Explains namespace behavior, /proc effects, CLI configuration, and SELinux implications without descending into kernel internals.
- Examples
- Demonstrates default and host PID views with Podman commands that list numeric directories under /proc.
- What you can do after
- Operate/configure Podman process visibility with the default namespace or the `--pid=host` option.
Related concepts
- containerused by · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.
- podconfigured by · A Kubernetes Pod is the smallest deployable unit in Kubernetes, grouping one or more co-located containers that share networking and other resources.
- maskimplements · Masking is the selective representation, concealment, inclusion, exclusion, or restriction of parts of data or a system according to specified criteria.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.