Container Basics On Linux (Namespaces/Cgroups)

Stop manually hunting down every container process in your task list

🧩 The Challenge

Trying to figure out which processes belong to a specific container by grepping through ps aux is a nightmare that always ends in a headache. You’ve definitely spent way too long matching PIDs manually when the system starts acting weird.

💡 The Fix

You can use the nsenter command to jump straight into the namespaces of a running container without needing to log in via the container runtime at all. It treats the container like just another part of your process tree.

nsenter -t $(docker inspect --format {{.State.Pid}} <container_name_or_id>) -n -p -m -u -i bash

⚙️ Why It Works

This command forces your shell to enter the specific network, process, mount, UTS, and IPC namespaces of the target process. Since you’re essentially borrowing the container’s environment, you can run tools like ip addr or ps exactly as the container sees them.

🚀 Pro-Tip: Alias this to something like ‘enter’ and keep your shell history clean.

Linux Tips & Tricks | © ngelinux.com | 7/23/2026