pivot_root


root의 file system을 새로 만들어서 탈옥 못하게 함
```typepivot_root [new-root] [old-root]```



```typecd /tmpmkdir nginx-rootdocker export $(docker create nginx) | tar -C nginx-root -xvf -mkdir new-rootmount -n -t tmpfs -o size=800M none ./new-rootcp -r nginx-root/* ./new-rootmkdir ./new-root/old-rootcd new_rootunshare -mpivot_root . old-rootcd /ls```





> [2편.컨테이너 인터널(2)](https://netpple.github.io/docs/make-container-without-docker/container-internal-2)
