Blogging is one of the central activities at Container Solutions. We try to regularly publish blogs on a variety of topics, from technical pieces to articles on strategy or psychology. Personally, I’ve been blogging for at least a decade and would like to think I’ve learnt a few lessons on what works and what doesn’t. As everything is moving online at the minute, this seems a great chance to share my tips with everyone.

In a previous post we covered the history and rules behind capabilities. In this post, we'll go through some examples of how Linux capabilities work and can be used, and the tooling available. We will also take a look at why capabilities are important when working with containers.

Linux capabilities, and how they interact with users and containers, can confuse even experienced engineers. At first it seems like this is fairly straightforward stuff, but it gets complex quickly and the information on exactly what is going on is scattered across many pages, Git repos and blogs, so it can be hard to piece together.

So you've got your shiny new Kubernetes cluster up-and-running. You've tried running the standard nginx image and now you'd like to build and run your own image. But how are you going to get your image on the cluster?