How OverlayFS Works: Layers, Whiteouts, and Why Containers Share Base Images
A container that starts from a shared Debian image layer, writes a new hostname into /etc/hostname, and deletes a file that came from the ba...
November 2026
How KVM Works: VM Exits, EPT, and Why a Guest Is Scheduled Like a Process
A process that starts a virtual machine does not execute guest instructions the way it executes its own. When the guest is running, the CPU ...
Sarthak Bystander
3 Nov, 2026
How KVM Works: VM Exits, EPT, and Why a Guest Is Scheduled Like a Process
A process that starts a virtual machine does not execute guest instructions the way it executes its own. When the guest is running, the CPU ...
Sarthak Bystander
3 Nov, 2026
How KVM Works: VM Exits, EPT, and Why a Guest Is Scheduled Like a Process
A process that starts a virtual machine does not execute guest instructions the way it executes its own. When the guest is running, the CPU ...
Sarthak Bystander
3 Nov, 2026
How Linux Capabilities and the LSM Framework Work: Fine-Grained Privilege, Hook Points, and Why Root Is No Longer All-or-Nothing
A process that needs to bind a low-numbered TCP port, or to change the system clock, does not need the power to rewrite arbitrary files, kil...
Sarthak Bystander
2 Nov, 2026