Container Basics On Linux (Namespaces/Cgroups)

See which process is leaking into your container namespaces

🧩 The Challenge

Dealing with a container that feels like it’s dragging down the host but none of the standard stats make sense is a nightmare. I once spent three hours hunting down a rogue thread that escaped its sandbox, only to realize I was looking at the wrong view of the process tree.

💡 The Fix

Use unshare combined with a quick check of your process namespace mapping to verify exactly where your boundaries are drawn. It clears up the confusion when you need to see if a process is truly isolated or just wearing a mask.

nsenter -t <PID> -p -m -u -i -n -c ps aux

⚙️ Why It Works

By entering the specific namespaces of a target process, you force your terminal to ignore the host’s view and adopt the same reality the container sees. It’s the closest you’ll get to actually hopping inside the container’s head to see what it’s trying to hide.

🚀 Pro-Tip: Alias this to something like enter-container-view to save your sanity when you’re jumping between ten different pods.

Linux Tips & Tricks | © ngelinux.com | 7/13/2026