Escaping Containers

Serge E. Hallyn serge.hallyn at
Wed Aug 3 14:49:51 PDT 2011

Quoting Prashanth Mohan (prashmohan at
> Hello,
> I recently came across this blog posting
> ( which details a mechanism to
> escape from Linux Containers. The posting seems to indicate that this
> is because sysfs does not support namespaces. Is this a problem that
> is being actively looked into? Is there a workaround for this and/or a
> permanent solution in the works?

For the latter, please read the whole blog post you cited.

For a workaround using Smack, see
from the lxc-users mailing list.


More information about the Containers mailing list