yeaaaah I don't wanna fuck with cgroups either; I think you're doing it right
November 7, 2026 at 11:10 PM
yeaaaah I don't wanna fuck with cgroups either; I think you're doing it right
Taming Autonomous AI Agents with Rootless Docker
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.
#hackernews #news
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.
#hackernews #news
Taming Autonomous AI Agents with Rootless Docker
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.
hackernoon.com
November 7, 2026 at 10:45 PM
Taming Autonomous AI Agents with Rootless Docker
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.
#hackernews #news
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.
#hackernews #news
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges. #rootlessdocker
Taming Autonomous AI Agents with Rootless Docker
hackernoon.com
November 6, 2026 at 3:00 PM
How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges. #rootlessdocker
It all comes down to:
Namespaces and cgroups. That’s really all you need to know.
Namespaces and cgroups. That’s really all you need to know.
November 9, 2026 at 2:30 PM
It all comes down to:
Namespaces and cgroups. That’s really all you need to know.
Namespaces and cgroups. That’s really all you need to know.
Used for group scheduling of real-time tasks using cgroups: Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair" - Phoronix buff.ly/vjytETH
Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups.
buff.ly
November 6, 2026 at 7:45 PM
Used for group scheduling of real-time tasks using cgroups: Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair" - Phoronix buff.ly/vjytETH
Kubernetes v1.35 starts failing kubelet startup on cgroup v1 nodes, pushing clusters to cgroup v2. 🐧⚙️🚀 #Kubernetes #Linux #cgroups #DevOps #PlatformEngineering
https://kubernetes.io/blog/2026/10/06/kubernetes-cgroups-v2-shift/
kubernetes.io
November 8, 2026 at 10:39 AM
Kubernetes v1.35 starts failing kubelet startup on cgroup v1 nodes, pushing clusters to cgroup v2. 🐧⚙️🚀 #Kubernetes #Linux #cgroups #DevOps #PlatformEngineering
📰 **Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"**
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 8, 2026 at 11:30 AM
📰 **Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"**
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Beyond the meta-complaints about the writeup reading like LLM slop, the thread left an unresolved question hanging: can cgroups, seccomp, and the Linux kernel ever genuinely isolate untrusted multi-tenancy, or is the host kernel attack surface simply too big to defend? #cloud 4/4
November 7, 2026 at 10:00 PM
Beyond the meta-complaints about the writeup reading like LLM slop, the thread left an unresolved question hanging: can cgroups, seccomp, and the Linux kernel ever genuinely isolate untrusted multi-tenancy, or is the host kernel attack surface simply too big to defend? #cloud 4/4
Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair" - https://www.phoronix.com/news/Linux-Drop-RT_GROUP_SCHED
Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
www.phoronix.com
November 6, 2026 at 11:21 AM
Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair" - https://www.phoronix.com/news/Linux-Drop-RT_GROUP_SCHED
📰 **Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"**
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 6, 2026 at 11:23 AM
📰 **Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"**
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
📰 Source: Phoronix
🔗 Link […]
Write a container runtime and you learn: a container is a host process fenced in by namespaces and cgroups, an image is a folder it chroots into, runc needs a C shim.
Docker's creator turned the HN thread into an AMA.
https://codeandcake.dev/posts/2026-10-22-docker-is-weird
Docker's creator turned the HN thread into an AMA.
https://codeandcake.dev/posts/2026-10-22-docker-is-weird
November 9, 2026 at 12:10 AM
Write a container runtime and you learn: a container is a host process fenced in by namespaces and cgroups, an image is a folder it chroots into, runc needs a C shim.
Docker's creator turned the HN thread into an AMA.
https://codeandcake.dev/posts/2026-10-22-docker-is-weird
Docker's creator turned the HN thread into an AMA.
https://codeandcake.dev/posts/2026-10-22-docker-is-weird
Linux-ontwikkelaars willen RTGROUPSCHED verwijderen
Linux-kernelontwikkelaars bespreken de verwijdering van RT GROUP SCHED, een voorziening voor de groepsgewijze planning van realtime taken met cgroups.
Lees op techspeeltuin.nl
#technieuws #SoftwareEnOS
Linux-kernelontwikkelaars bespreken de verwijdering van RT GROUP SCHED, een voorziening voor de groepsgewijze planning van realtime taken met cgroups.
Lees op techspeeltuin.nl
#technieuws #SoftwareEnOS
Linux-ontwikkelaars willen RTGROUPSCHED verwijderen
Linux-kernelontwikkelaars bespreken de verwijdering van RT GROUP SCHED, een voorziening voor de groepsgewijze planning van realtime taken met cgroups.
techspeeltuin.nl
November 6, 2026 at 2:38 PM
Linux-ontwikkelaars willen RTGROUPSCHED verwijderen
Linux-kernelontwikkelaars bespreken de verwijdering van RT GROUP SCHED, een voorziening voor de groepsgewijze planning van realtime taken met cgroups.
Lees op techspeeltuin.nl
#technieuws #SoftwareEnOS
Linux-kernelontwikkelaars bespreken de verwijdering van RT GROUP SCHED, een voorziening voor de groepsgewijze planning van realtime taken met cgroups.
Lees op techspeeltuin.nl
#technieuws #SoftwareEnOS
Docker Engine API access enables root-equivalent container creation and host escape, so autonomous agents require structural containment via rootless Docker, namespaces, and cgroups v2 plus correct socket wiring.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
November 6, 2026 at 5:15 PM
Docker Engine API access enables root-equivalent container creation and host escape, so autonomous agents require structural containment via rootless Docker, namespaces, and cgroups v2 plus correct socket wiring.
Docker Engine API access enables root-equivalent container creation and host escape, so autonomous agents require structural containment via rootless Docker, namespaces, and cgroups v2 plus correct socket wiring.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
November 6, 2026 at 5:13 PM
Docker Engine API access enables root-equivalent container creation and host escape, so autonomous agents require structural containment via rootless Docker, namespaces, and cgroups v2 plus correct socket wiring.
nspawn 3.x.
Since the 2.0 release:
― a compatible Docker Engine API for apps that uses it. This allows you to run, for example, GitLab/GitHub runners on systemd-nspawn and even use the docker-cli to manage systemd-nspawn containers
― IPv6 support
― device cgroups rules support for working […]
Since the 2.0 release:
― a compatible Docker Engine API for apps that uses it. This allows you to run, for example, GitLab/GitHub runners on systemd-nspawn and even use the docker-cli to manage systemd-nspawn containers
― IPv6 support
― device cgroups rules support for working […]
Original post on beige.party
beige.party
November 8, 2026 at 9:35 AM
nspawn 3.x.
Since the 2.0 release:
― a compatible Docker Engine API for apps that uses it. This allows you to run, for example, GitLab/GitHub runners on systemd-nspawn and even use the docker-cli to manage systemd-nspawn containers
― IPv6 support
― device cgroups rules support for working […]
Since the 2.0 release:
― a compatible Docker Engine API for apps that uses it. This allows you to run, for example, GitLab/GitHub runners on systemd-nspawn and even use the docker-cli to manage systemd-nspawn containers
― IPv6 support
― device cgroups rules support for working […]
[Phoronix] Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"
#Linux #LinuxKernel
#Linux #LinuxKernel
Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"
Linux kernel developers are looking at dropping the RT_GROUP_SCHED feature that is used for group scheduling of real-time tasks using cgroups...
www.linuxnews.net
November 6, 2026 at 12:00 PM
[Phoronix] Linux Developers Look To Drop RT_GROUP_SCHED As It's "Broken Beyond Repair"
#Linux #LinuxKernel
#Linux #LinuxKernel
На стриме мы разобрали «шумного соседа»: в примере две из десяти VM забирают почти все ресурсы хоста, оставляя остальных без мощности. Участник рассказал, как ограничил это через cgroups v2 в Linux. Где вы ставите лимиты до первого инцидента? Приходите на стримы Cogtie. #Linux
November 2, 2026 at 8:22 AM
На стриме мы разобрали «шумного соседа»: в примере две из десяти VM забирают почти все ресурсы хоста, оставляя остальных без мощности. Участник рассказал, как ограничил это через cgroups v2 в Linux. Где вы ставите лимиты до первого инцидента? Приходите на стримы Cogtie. #Linux
Лимиты до первого инцидента ставят только те, у кого продвинутые юзеры в соседях; на практике все вспоминают cgroups после того, как продакшн начал тормозить.
November 2, 2026 at 8:24 AM
Лимиты до первого инцидента ставят только те, у кого продвинутые юзеры в соседях; на практике все вспоминают cgroups после того, как продакшн начал тормозить.
Linux: what employers want and why
This article frames containerization solely as a technical efficiency gain, yet it minimizes the significant operational shift required to successfully implement and maintain these systems at scale. The reliance on shared kernel features like cgroups and names…
This article frames containerization solely as a technical efficiency gain, yet it minimizes the significant operational shift required to successfully implement and maintain these systems at scale. The reliance on shared kernel features like cgroups and names…
arc-codex.com
November 2, 2026 at 1:19 PM
Linux: what employers want and why
This article frames containerization solely as a technical efficiency gain, yet it minimizes the significant operational shift required to successfully implement and maintain these systems at scale. The reliance on shared kernel features like cgroups and names…
This article frames containerization solely as a technical efficiency gain, yet it minimizes the significant operational shift required to successfully implement and maintain these systems at scale. The reliance on shared kernel features like cgroups and names…
Kubernetes: a “Detective Work” with the OOM Killer, Linux cgroups, and cAdvisor container_memory
https://rtfm.co.ua/en/kubernetes-a-detective-work-with-the-oom-killer-linux-cgroups-and-cadvisor-container_memory/
We ran into a pretty standard
#
Grafana# Kubernetes# Linux
https://rtfm.co.ua/en/kubernetes-a-detective-work-with-the-oom-killer-linux-cgroups-and-cadvisor-container_memory/
We ran into a pretty standard
#
Grafana# Kubernetes# Linux
October 29, 2026 at 3:12 PM
Kubernetes: a “Detective Work” with the OOM Killer, Linux cgroups, and cAdvisor container_memory
https://rtfm.co.ua/en/kubernetes-a-detective-work-with-the-oom-killer-linux-cgroups-and-cadvisor-container_memory/
We ran into a pretty standard
#
Grafana# Kubernetes# Linux
https://rtfm.co.ua/en/kubernetes-a-detective-work-with-the-oom-killer-linux-cgroups-and-cadvisor-container_memory/
We ran into a pretty standard
#
Grafana# Kubernetes# Linux
Linux 7.3 is out. Cgroup scheduling gets new weight modes (cgroup_mode, default 'concur') and a single runqueue.
Pod CPU limits are enforced through cgroups, so roll it one node pool at a time. Your control plane runs with us, untouched by any drain.
Which pool gets 7.3 first?
Pod CPU limits are enforced through cgroups, so roll it one node pool at a time. Your control plane runs with us, untouched by any drain.
Which pool gets 7.3 first?
October 30, 2026 at 7:01 PM
Linux 7.3 is out. Cgroup scheduling gets new weight modes (cgroup_mode, default 'concur') and a single runqueue.
Pod CPU limits are enforced through cgroups, so roll it one node pool at a time. Your control plane runs with us, untouched by any drain.
Which pool gets 7.3 first?
Pod CPU limits are enforced through cgroups, so roll it one node pool at a time. Your control plane runs with us, untouched by any drain.
Which pool gets 7.3 first?
Syscalls, modules, cgroups, namespaces, the scheduler, /proc and /sys — how deep do your Linux kernel internals go? 15 questions, explanations for every answer, free brag card at the end: https://www.fosslinux.com/163320/linux-kernel-internals-quiz.htm #LinuxKernel
October 30, 2026 at 4:30 AM
Syscalls, modules, cgroups, namespaces, the scheduler, /proc and /sys — how deep do your Linux kernel internals go? 15 questions, explanations for every answer, free brag card at the end: https://www.fosslinux.com/163320/linux-kernel-internals-quiz.htm #LinuxKernel
October 26, 2026 at 12:30 PM
My article about Cgroups is out.
In this article we explore an example of how cgroups work from the interface, to how is represented internally in the code, and even going through the process of a simple cgroup limit.
internals-for-interns.com/posts/linux-...
#Linux #Containers #Cgroups
In this article we explore an example of how cgroups work from the interface, to how is represented internally in the code, and even going through the process of a simple cgroup limit.
internals-for-interns.com/posts/linux-...
#Linux #Containers #Cgroups
Cgroups | Internals for Interns
In the previous article
we saw how namespaces make one machine look like several: each group of processes gets its own hostname, its own pid 1, its own network. But we ended on a problem. A process w...
internals-for-interns.com
October 26, 2026 at 11:49 AM
My article about Cgroups is out.
In this article we explore an example of how cgroups work from the interface, to how is represented internally in the code, and even going through the process of a simple cgroup limit.
internals-for-interns.com/posts/linux-...
#Linux #Containers #Cgroups
In this article we explore an example of how cgroups work from the interface, to how is represented internally in the code, and even going through the process of a simple cgroup limit.
internals-for-interns.com/posts/linux-...
#Linux #Containers #Cgroups