Taming Container Log Sprawl with Podman and systemd-journald

Introduction to Container Log Sprawl

I’ve seen container log management become a real challenge for many Linux administrators. As the number of containers grows, so does the volume of logs, making it tough to keep track of important events and debug issues. In my experience, using the right tools and techniques can make all the difference. In this article, I’ll share how to use Podman and systemd-journald to manage container logs effectively.

[Read More]

Using seccomp to Lock Down Container Privileges in Linux

Introduction to seccomp

I’ve seen seccomp, short for “secure computing,” become an essential tool in my Linux toolkit. It’s a Linux kernel feature that lets you filter system calls, effectively limiting what a process can do. This is especially useful when running containers - it helps prevent a compromised container from causing damage to the host system. In this article, I’ll explore how to use seccomp to lock down container privileges in Linux.

[Read More]