Better way to create a seccomp filter for a specific language

[AlphaNecron]

Is there a faster and painless way to generate seccomp configs for languages besides manually adding them? Btw should I use container or ptrace, which is better though?

[AlphaNecron]

Anyways, switched to Linux namespace. I'm doing a worker, the app will run indefinitely and take submissions from queue, each submission has x test cases, and for each test case do I have to spawn a new ns and cgroup instance or use a shared instance for everything?

[criyle]

File descriptor is being duplicated into child processes so the file pointer is changed by writing as well. You may use mf.Seek(0, 0) to reset the file pointer before reading the file.

[AlphaNecron]

Thanks.

[AlphaNecron]

How does container work? It uses containerd under the hood?

[criyle]

Nope, it uses kernel container interface directly in this package.

[AlphaNecron]

Oh, thanks.