A hands-on Rust learning path for Linux container primitives: namespaces, cgroups, and OCI/runc.
Get hands-on with container internals quickly. 10 lessons, ~10 minutes each.
Deep dive with detailed explanations, edge cases, and thorough coverage.
Five Rust CLI tools that demonstrate container building blocks:
- ns-tool - namespace creation and management
- netns-tool - network namespace setup with veth pairs
- cgroup-tool - cgroup v2 resource limits
- oci-tool - OCI bundle helpers
- ebpf-tool - eBPF tracing with kprobes, uprobes, and tracepoints
- 00-setup-rust.md
- 01-rust-syscall-basics.md
- 02-cli-patterns.md
- 03-procfs-intro.md
- 04-permissions-and-sudo.md
- 05-error-handling.md
- 06-unsafe-boundaries.md
- 01-pid-namespace.md
- 02-unshare-vs-clone.md
- 03-uts-ipc.md
- 04-mount-namespace.md
- 05-minimal-rootfs.md
- 06-netns-basics.md
- 07-veth-bridge.md
- 08-netns-nat.md
- 09-combine-ns.md
- 10-join-existing.md
- 01-oci-bundle.md
- 02-config-json.md
- 03-run-basic.md
- 04-lifecycle.md
- 05-seccomp.md
- 06-network-integration.md
- 07-cgroups-integration.md
- 00-ebpf-setup.md
- 01-hello-kprobe.md
- 02-reading-data.md
- 03-maps.md
- 04-perf-events.md
- 05-uprobes.md
- 06-tracepoints.md
- 07-perf-sampling.md
- 08-combining.md
These exercises require root privileges and modify system state. Use a VM or container.