理解docker [二] - namespace - 知乎

Kubernetes Controller 机制详解（一）-赵化冰的博客 | Zhaohuabing Blog

K8S之自定义Controller - 知乎

Controller - K8S - 知乎

https://coolshell.cn/articles/17010.html/comment-page-2#comment-2133157

https://windsock.io/uts-namespace/

A Brief Tour of Linux Security Modules — Star Lab Software

https://www.researchgate.net/publication/302574274_Jitk_A_Trustworthy_In-Kernel_Interpreter_Infrastructure/link/57316b2308aed286ca0dce6c/download?_tp=eyJjb250ZXh0Ijp7ImZpcnN0UGFnZSI6InB1YmxpY2F0aW9uIiwicGFnZSI6InB1YmxpY2F0aW9uIiwicHJldmlvdXNQYWdlIjoiX2RpcmVjdCJ9fQ

https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html