TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #1037 735
Learn how CRI-O, a Kubernetes container runtime, has a new feature that allows applying seccomp profiles from OCI registries.

This feature is useful for sandboxing a process's privileges, restricting the calls it can make from userspace into the kernel.

More: https://kubernetes.io/blog/2024/03/07/cri-o-seccomp-oci-artifacts
Open in Telegram All posts from @kubesploit
More from @kubesploit
  1. Oct 6, 2026WaaS creates browser-accessible Linux and Windows desktops as Kubernetes resources, with G…
  2. Oct 6, 2026This tutorial teaches how to preserve the real client IP behind an Istio ambient gateway w…
  3. Oct 6, 2026Dilshan Wijesooriya, Senior Cloud Engineer at Coolblue, explains how upgrading from Amazon…
  4. Oct 6, 2026Why can a Go service be OOM-killed while its heap looks healthy? The heap is only part of…
  5. Oct 6, 2026Software supply chain security should not be treated as optional extra work. Przemysław Wo…
  6. Oct 5, 2026This case study shows how an AKS-based GitOps platform gave on-premises clusters workload…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →