Files
Qiming Teng c52818c03d Switch language name 'zh' to 'zh-cn'
This is the first step to rename 'zh' to 'zh-cn'. There are several reasons why we rename the language name.

- The upstream docsy theme changed the language name, leading to many warnings during site build;
  The side-effect is that the i18n strings are no longer working.
- We believe renaming the language is the right thing to do, because this move can make room for other variants of Chinese language, such as 'zh-tw', 'zh-sg' etc.

There would be several follow-ups to this PR, such as fixing the intra-site links, adding redirects etc.

We will lock up changes to zh/zh-cn pages for the moment, until this one gets in.

This PR is based on commit cdad0a7342.
2022-06-10 22:33:41 +08:00

1.7 KiB

title, id, date, full_link, short_description, aka, tags
title id date full_link short_description aka tags
用户名字空间 userns 2021-07-13 https://man7.org/linux/man-pages/man7/user_namespaces.7.html 一种为非特权用户模拟超级用户特权的 Linux 内核功能特性。
security

用来模拟 root 用户的内核功能特性。用来支持“Rootless 容器”。

用户名字空间(User Namespace)是一种 Linux 内核功能特性,允许非 root 用户 模拟超级用户("root")的特权,例如用来运行容器却不必成为容器之外的超级用户。

用户名字空间对于缓解因潜在的容器逃逸攻击而言是有效的。

在用户名字空间语境中,名字空间是 Linux 内核的功能特性而不是 Kubernetes 意义上的 {{< glossary_tooltip text="名字空间" term_id="namespace" >}}概念。