One of the technologies used by Linux containers to provide an isolated environment, is namespaces. They are used to provide a contained process with an isolated view of different Linux resources.

In this video we look at some of the details of how Linux namespaces work and then take a more detailed look at the mount namespace which isolates a processes' view of its filesystem.

To learn more read our blog on Datadog’s Security Labs site: https://securitylabs.datadoghq.com/articles/container-security-fundamentals-part-2/