Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Or it could not be triggered if you don't use containers.


It could also be triggered by application sandboxing solutions that aren't containers.


That's another reason to avoid those appimages and snaps.


Would it have occurred on Podman as well?


Some of my servers were running Ubuntu with systemd+podman to manage services, and none of them had a problem.


You would have to be running this specific kernel version and one of your containers has to memory-map a file (not from a volume?), from what I understand.


Depending on your configuration. You would need to be using overlayfs with Podman.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: