Explore >> Select a destination


You are here

olegkutkov.me
| | docfate111.github.io
4.8 parsecs away

Travel
| |
| | wittchen.io
4.1 parsecs away

Travel
| | Sometimes we may want to format external USB drive. I recently encountered a situation, where I had bootable USB drive with operating system ready to install, but I wanted to remove all this stuff and use disk for storing data. I couldn't format this disk with GUI tools for some reason and I kept getting errors or information that it's not possible. In case you don't know, on Linux everything is always possible, so I quit that GUI tool, opened terminal and start playing with good old and simple programs.
| | xcellerator.github.io
3.8 parsecs away

Travel
| | In all the playing around I've been doing with Linux kernel modules, I decided to see what would happen if you tried to load one from a Docker container. It turns out that privileged containers (or just those with CAP_SYS_MODULE) are able to use the sys_init_module() and sys_finit_module() syscalls - which are what's used to load kernel modules. As all containers share their kernel with the host (unlike VMs), this clearly results in yet another complete system compromise.
| | www.justinvollmer.com
39.7 parsecs away

Travel
| Justin Vollmer's personal website