WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 20, 2024 • Session details

Docker exec without Docker

Oliver Seitz

Ever wondered what happens if you strip away the Docker CLI? Learn to replicate docker exec using raw Linux primitives to master resource isolation and tighten security.

Pause
Mute Enter Fullscreen
#1 about 4 min

Demystifying the mechanics behind container execution routines

Exploring the underlying execution paths and hidden processes activated when launching standard container commands.

#2 about 2 min

Essential Linux kernel features for running containers

How operating system features like control groups and namespaces form the foundational building blocks of containerization.

#3 about 3 min

Limiting container resources using control groups

Configuring processing time, memory thresholds, process creation counts, and io constraints to prevent system resource exhaustion.

#4 about 4 min

Controlling process execution limits directly via shell

Manually assigning running processes to a modified cgroup filesystem configuration to observe utilization throttling.

#5 about 6 min

Isolating container environments with Linux namespaces

Utilizing network interfaces, mount points, process trees, and user identity mapping to sandbox application boundaries.

#6 about 4 min

Creating isolated network interfaces via the unshare command

Spawning partitioned local network spaces to selectively restrict the inter-process communication pathways.

#7 about 4 min

Joining an active process environment using nsenter

Using process identifiers to dynamically attach standard host shells into previously localized target namespaces.

#8 about 4 min

Simulating the docker exec command with native tools

Entering a running web server container strictly by targeting its root process identifiers through nsenter execution.

#9 about 2 min

Learning strategies for deep technical tool understanding

Why investigating low-level implementations and limiting operational scope yields better security insights over superficial usage.

Matching moments

2:51 min

Fundamentals of container network isolation and system components

Oliver Seitz Oliver Seitz · WWC 2025

3:43 min

Isolating workloads using kernel namespaces and control groups

Marc Nimmerrichter · WWC 2022

6:01 min

Handling container constraints and fileless malware

Dimitrij Klesev +1 · LIVE

1:59 min

Orchestrating with Kubernetes against Docker and accessing slides

Philipp Krenn · WWC 2022

11:34 min

Answering audience questions on container functionality and local workflows

Rob Richardson · WWC 2021

2:55 min

Enterprise container migration and historical technology evolution

Federico Fregosi · WWC 2022

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
10 months ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
almost 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
almost 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail
24:08
almost 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail
27:46
almost 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

It’s Alive! Taming the MLOps Franken-Stack: Write, Run, and Serve with Michelangelo

Eric Wang, Paul Zimmerman

Eric Wang
Paul Zimmerman
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

Run your agents in Kubernetes: Build once, deploy anywhere. But really?

Michal Salanci

Senior Systems Engineer at ESET Cybersecurity

Michal Salanci
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

Related videos

Docker network without Docker thumbnail
28:26
WWC 2025 • 12 months ago

Docker network without Docker

Oliver Seitz

Docker build without Docker thumbnail
28:40
WWC Europe 2026 • about 1 month ago

Docker build without Docker

Oliver Seitz

Reusing apps between teams and environments through Containers thumbnail
43:39
LIVE • over 5 years ago

Reusing apps between teams and environments through Containers

Adrian Kosmaczewski

Turning Container security up to 11 with Capabilities thumbnail
28:47
WWC 2023 • almost 3 years ago

Turning Container security up to 11 with Capabilities

Mathias Tausig

Go's Concurrency and Parallelism Inside Containers thumbnail
30:48
WWC Europe 2026 • about 1 month ago

Go's Concurrency and Parallelism Inside Containers

Rick Rackow

A practical guide to writing secure Dockerfiles thumbnail
42:25
LIVE • over 5 years ago

A practical guide to writing secure Dockerfiles

Madhu Akula

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.