https://www.hairizuan.com/tags/security/ Recent content in Security on Experiment, Fail, Learn, Repeat Hugo -- gohugo.io en Copyright © 2026 Hairizuan Noorazman Fri, 11 Sep 2026 17:03:51 +0800 https://www.hairizuan.com/the-isolation-boundary-of-multikernel-linux-containers/ Sat, 05 Sep 2026 00:00:00 +0000 https://www.hairizuan.com/the-isolation-boundary-of-multikernel-linux-containers/ <p>The phrase “one kernel per container” sounds like a stronger isolation claim than “one process namespace per container.” In a Multikernel Linux runtime, each child really does have its own kernel, process table, boot ID, CPUs, memory description, and root filesystem. That still does not make it equivalent to a virtual machine.</p>