Container Basics On Linux (Namespaces/Cgroups)
Stop your unshare processes from lingering like zombies
🧩 The Challenge
You finally figured out how to use unshare to test a new network namespace, but then you realize the PID namespace is still stuck holding onto your shell long after you meant to exit. It’s a total pain to clean up these orphaned processes when you’re just trying to experiment without rebooting the whole machine.
đź’ˇ The Fix
Just add the fork flag so your new process doesn’t inherit the parent’s environment, or use the mount-proc flag to keep the process tree clean. It keeps things contained where they belong.
sudo unshare -fp --mount-proc /bin/bash⚙️ Why It Works
By creating a new PID namespace with a fresh proc mount, your shell effectively becomes PID 1 inside that sandbox, ensuring that once you exit, every child process gets sent a SIGTERM.
🚀 Pro-Tip: Use the -r flag to automatically map your current user to root inside that namespace so you don’t run into permission walls while testing.
Linux Tips & Tricks | © ngelinux.com | 7/28/2026