Nerd Sniped by BINFMT_MISC
A developer explores using Linux's BINFMT_MISC to run scripts in any language via containers, building on a Cloudflare post about scripting in Go.
Jessie Frazelle is a technologist and author specializing in hardware, software, and data center technologies. She writes about chip design, mechanical CAD, energy systems, 3D printing, and security in computing.
69 articles from this blog
A developer explores using Linux's BINFMT_MISC to run scripts in any language via containers, building on a Cloudflare post about scripting in Go.
A developer details their personal infrastructure setup, including a self-hosted Jenkins CI server, private Docker registry, and various automation tools.
A developer details setting up a home lab with Unifi networking gear, Docker containers, Intel NUCs, and Yubikey SSH authentication.
A developer's guide to Windows Subsystem for Linux (WSL), explaining its architecture and setup for Linux enthusiasts.
A critique of past and present security tools, arguing for better collaboration between security and software engineers to create usable security.
Explores two system objects, time and the kernel keyring, that are not isolated by Linux kernel namespaces, affecting container security.
A technical comparison of container technologies (Linux containers, Solaris Zones, BSD Jails) versus VMs, focusing on design philosophy and flexibility.
A developer details their custom Linux desktop setup using CoreOS Container Linux, containers, and plans for Wayland.
A developer recounts the chaotic process of changing their GitHub username and the cascading technical issues it caused across their projects and CI/CD pipelines.
A developer explores balancing personal passion for open source projects with corporate responsibilities, based on a talk at GitHub Universe.
A technical guide on using Google BigQuery to analyze GitHub pull request data, including SQL queries for repository statistics.
A sarcastic, BuzzFeed-style list of 10 useful LDFLAGS for linker configuration and debugging in software development.
A guide for open source maintainers on how to gracefully close or reject unwanted pull requests and patch submissions.
Explores the technical challenges and differences between traditional containers and true sandbox environments, focusing on user namespaces and privilege levels.
A blunt, opinionated guide comparing Docker graphdrivers like Overlay, Aufs, Btrfs, Zfs, Devicemapper, and Vfs, highlighting their pros, cons, and setup quirks.
Explains how to assign specific public IPs to Docker containers using the new libnetwork feature in Docker 1.10.
A guide on converting Docker containers to runc for desktop use, focusing on user namespace control and custom networking tools.
A technical guide on using Docker's user namespace support to run desktop applications like Chrome, Irssi, and Docker-in-Docker in containers for improved security.
A technical guide on creating and debugging custom Docker Seccomp security profiles for containers, using a Chrome container as an example.
Explores decompression bombs and demonstrates using Docker's cgroup blkio controls to throttle disk I/O bandwidth.