Container Basics On Linux (Namespaces/Cgroups)

Stop nsenter from leaving you lost in the wrong mount namespace

🧩 The Challenge

Trying to debug a container that’s gone rogue is a nightmare when your shell doesn’t match the process’s view of the filesystem. You end up staring at a bunch of empty directories thinking you’ve gone crazy.

💡 The Fix

Just use the target flag with the process ID to hop right into every single namespace the container is using. It saves you from seeing the host’s view when you really need to see what’s happening inside the container.

nsenter -t <pid> -m -u -n -i -p

⚙️ Why It Works

Since the kernel keeps track of namespaces per process, this command forces your shell to attach to the same set of namespaces as the PID you specify. Everything starts lining up correctly once you’re inside their bubble.

🚀 Pro-Tip: Alias this to something like ‘enter’ so you aren’t hunting for the flags every single time a container acts up.

Linux Tips & Tricks | © ngelinux.com | 8/5/2026