this post was submitted on 16 Dec 2025
163 points (97.7% liked)

Linux

60376 readers
634 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS
 

I've been setting up a new Proxmox server and messing around with VMs, and wanted to know what kind of useful commands I'm missing out on. Bonus points for a little explainer.

Journalctl | grep -C 10 'foo' was useful for me when I needed to troubleshoot some fstab mount fuckery on boot. It pipes Journalctl (boot logs) into grep to find 'foo', and prints 10 lines before and after each instance of 'foo'.

you are viewing a single comment's thread
view the rest of the comments
[–] jim3692@discuss.online 2 points 6 days ago (1 children)

docker run --rm -it --privileged --pid=host debian:12 nsenter -a -t1 "$(which bash)"

If your user is in the docker group, and you are not running rootless Docker, this command opens a bash shell as root.

How it works:

  • docker run --rm -it creates a temporary container and attaches it to the running terminal
  • --privileged disables some of the container's protections
  • --pid=host attaches the container to the host's PID namespace, allowing it to access all running processes
  • debian:12 uses the Debian 12 image
  • nsenter -a -t1 enters all the namespaces of the process with PID 1, which is the host's init since we use --pid=host
  • "$(which bash)" finds the path of the host's bash and runs it inside the namespaces (plain bash may not work on NixOS hosts)
[–] noughtnaut@lemmy.world 2 points 5 days ago (1 children)

So you're running bash "as if you're on the host systen". What's the benefit?

[–] jim3692@discuss.online 1 points 5 days ago

I just wanted to show how Docker can be abused for privilege escalation, when it's not properly configured