Michael Kerrisk
where else to find them
what they talk about
where they keep going back
- NDC TechTown3 editions2018–2021
- NDC Security2 editions2023–2025
all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Tom Hromatka4 talks
- Christian Brauner30 talks
- Simon Goda3 talks
- Duffie Cooley18 talks
- Stephane Graber31 talks
- Alban Crequy23 talks
| title | conference | date |
|---|---|---|
| Linux containers in (less than) 100 lines of shell | NDC Security 2025 | 2025-01-20 |
Claims a usable Docker‑like container can be built with less than 100 lines of shell using only standard tools. Shows exact commands: unshare… | ||
| Using seccomp to limit the Linux kernel attack service | NDC Security 2023 | 2023-01-16 |
Explains how Linux seccomp actually limits syscalls by loading BPF bytecode filters that inspect syscall numbers and up to six register arguments, showing… | ||
| An introduction to control groups (cgroups) version 2 | NDC TechTown 2021 | 2021-08-30 |
Explains how cgroups v2 is the unified pseudo‑filesystem interface and shows concrete commands: create a cgroup by making a directory, add processes with echo… | ||
| Diving deeper into control groups (cgroups) v2 | NDC TechTown 2021 | 2021-08-30 |
Demonstrates three concrete cgroup v2 features with live demos: release notification by monitoring cgroup.events (watching the populated key via inotify or… | ||
| Containers unplugged: Linux namespaces | NDC TechTown 2019 | 2019-09-02 |
Walks through concrete namespace effects and commands: shows the /proc//ns inode identifiers, uses unshare + mount /proc demo to prove PID namespaces need a… | ||
| Containers unplugged: understanding user namespaces | NDC TechTown 2019 | 2019-09-02 |
Explains that user namespaces let a process be UID 0 inside a namespace while remaining an unprivileged UID outside, with 38 capabilities split into… | ||
| Understanding user namespaces | foss-north 2019 | 2019-04-07 |
Explains how user namespaces let a process be UID 0 inside a namespace while mapping to an unprivileged UID outside, shows actual commands (unshare and… | ||
| Using Seccomp to Limit the Kernel Attack Surface | Open Source Summit Europe & ELC + OpenIoT Summit Europe 2018 | 2018-10-22 |
Explains how seccomp uses in-kernel BPF programs loaded via prctl or the seccomp syscall (and supported by libseccomp) to whitelist system calls and inspect up… | ||
| Strace: Monitoring The Kernel-User-Space Conversation | NDC TechTown 2018 | 2018-09-27 |
Strace monitors every syscall a process makes via ptrace, decoding names, flags and structures symbolically (strings default to 32 bytes) and shows surprising… | ||
| Using Seccomp to Limit the Kernel Attack Surface | NDC TechTown 2018 | 2018-09-27 |
Seccomp uses BPF programs to whitelist or block kernel calls, reducing a 400-call kernel surface to the small set an app actually needs — typical apps uses <40… | ||
| nothing matches | ||