ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 20 - DCA discussion

Report
Export

Is this a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used?

Solution: user

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: A

Explanation:

The user namespace is a Linux kernel namespace that is disabled by default and must be enabled at Docker engine runtime to be used. The user namespace allows the host system to map its own uid and gid to some different uid and gid for containers' processes.This improves the security of Docker by isolating the user and group ID number spaces, so that a process's user and group ID can be different inside and outside of a user namespace1.To enable the user namespace, the daemon must start with--userns-remapflag with a parameter that specifies base uid/gid2.All containers are run with the same mapping range according to/etc/subuidand/etc/subgid3.Reference:

Isolate containers with a user namespace

Using User Namespaces on Docker

Docker 1.10 Security Features, Part 3: User Namespace

asked 08/11/2024
Francis Sailer
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first