Wow, user namespaces! That was quick!
EDIT: And a default seccomp profile! Did I miss the memo about containerisation suddenly becoming a competative industry?
EDIT: And a default seccomp profile! Did I miss the memo about containerisation suddenly becoming a competative industry?
Heh. Yeah, it took quite a while. Lots of kernel bugs. :P