What is the purpose of capabilities in the context of container virtualization?

Question

Avinash Jindal · Accepted Answer

Prevent processes from performing actions which might infringe the container.

Avinash Jindal · Answer

Map potentially dangerous system calls to an emulation layer provided by the container virtualization.

Avinash Jindal · Answer

Restrict the disk space a container can consume.

Avinash Jindal · Answer

Enable memory deduplication to cache files which exist in multiple containers.

Avinash Jindal · Answer

Allow regular users to start containers with elevated permissions.

List of questions