Container Basics On Linux (Namespaces/Cgroups)

Stop your unshare processes from lingering like zombies

🧩 The Challenge

You finally figured out how to use unshare to test a new network namespace, but then you realize the PID namespace is still stuck holding onto your shell long after you meant to exit. It’s a total pain to clean up these orphaned processes when you’re just trying to experiment without rebooting the whole machine.

💡 The Fix

Just add the fork flag so your new process doesn’t inherit the parent’s environment, or use the mount-proc flag to keep the process tree clean. It keeps things contained where they belong.

sudo unshare -fp --mount-proc /bin/bash

⚙️ Why It Works

By creating a new PID namespace with a fresh proc mount, your shell effectively becomes PID 1 inside that sandbox, ensuring that once you exit, every child process gets sent a SIGTERM.

🚀 Pro-Tip: Use the -r flag to automatically map your current user to root inside that namespace so you don’t run into permission walls while testing.

Linux Tips & Tricks | © ngelinux.com | 7/28/2026