parent
219b8f07a7
commit
126f9a3a0d
|
@ -43,11 +43,13 @@ Process Namespace Sharing is enabled using the `ShareProcessNamespace` field of
|
|||
|
||||
1. Create the pod `nginx` on your cluster:
|
||||
|
||||
```shell
|
||||
kubectl apply -f https://k8s.io/examples/pods/share-process-namespace.yaml
|
||||
```
|
||||
|
||||
1. Attach to the `shell` container and run `ps`:
|
||||
|
||||
```
|
||||
```shell
|
||||
kubectl attach -it nginx -c shell
|
||||
```
|
||||
|
||||
|
@ -66,6 +68,7 @@ Process Namespace Sharing is enabled using the `ShareProcessNamespace` field of
|
|||
You can signal processes in other containers. For example, send `SIGHUP` to
|
||||
nginx to restart the worker process. This requires the `SYS_PTRACE` capability.
|
||||
|
||||
```
|
||||
/ # kill -HUP 8
|
||||
/ # ps ax
|
||||
PID USER TIME COMMAND
|
||||
|
@ -74,10 +77,12 @@ nginx to restart the worker process. This requires the `SYS_PTRACE` capability.
|
|||
15 root 0:00 sh
|
||||
22 101 0:00 nginx: worker process
|
||||
23 root 0:00 ps ax
|
||||
```
|
||||
|
||||
It's even possible to access another container image using the
|
||||
`/proc/$pid/root` link.
|
||||
|
||||
```
|
||||
/ # head /proc/8/root/etc/nginx/nginx.conf
|
||||
|
||||
user nginx;
|
||||
|
@ -89,6 +94,7 @@ It's even possible to access another container image using the
|
|||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
```
|
||||
|
||||
{{% /capture %}}
|
||||
|
||||
|
|
Loading…
Reference in New Issue