Hacker Blogs
Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #17849

C

Christian Brauner

Personal blog · brauner.github.iosystemsprogrammingsecurity

Christian Brauner's personal blog at brauner.github.io covers systems, programming and security. Since 2018, 4 different Hacker News readers have linked it 12 times, most often “Runtimes and the Curse of the Privileged Container”. It is still writing: the last post was on 2024-12-15, and you can follow it by feed.

Visit the blog
12mentions?
4HN people?
2018–2021first – last linked?
Links on Hacker News per year · peak 5 in 2018

Too few sampled comments (3) to say how often HN recommends it.?

Why HN links it

HN readers link Christian Brauner's posts, written by an LXC/LXD developer, on Linux containers, binderfs for Android containers, and S3 sleep on a ThinkPad. One commenter calls a sleep post a nice blog post.

Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Most-linked posts?

  1. Runtimes and the Curse of the Privileged Container
    2 people · 4 mentions · first linked 2019-02-11
  2. Android Binderfs
    2 people · 2 mentions · first linked 2019-01-10

What Hacker News says?

  1. CameronNemo · 2021-09-22
    I have seen an error like that with anbox before, but it was not on Ubuntu. I just had to mount the binderfs and it stopped complaining. Might be worth a try: mount -t binder binder /dev/binderfs https://brauner.github.io/2019/01/09/android-binderfs.html

    Comment linking /2019/01/09/android-binderfs.html

    on “Waydroid – Run Android containers on Ubuntu”
  2. simosx · 2019-02-13

    Submitted Runtimes and the Curse of the Privileged Container as a story · 4 points

    HN discussion
  3. danieldk · 2020-12-11Recommends
    There is a nice blog post that describes this: https://brauner.github.io/2018/09/08/thinkpad-6en-s3.html I recently bought a T14, which also has this option. (It enables S3 sleep.)

    Comment linking /2018/09/08/thinkpad-6en-s3.html

    on “Why does Linux have so much trouble sleeping and waking?”
  4. brauner · 2018-02-28

    Submitted On the Way to LXC 3.0: Cgroup Pam Module and an Unprivileged Container Detour as a story · 3 points

    HN discussion
  5. brauner · 2019-02-11
    I've also written a smallish blogpost about this CVE. I'm a LX{C,D} maintainer and I've worked with Aleksa the runC maintainer together on a fix for this CVE: https://brauner.github.io/2019/02/12/privileged-containers.h...

    Comment linking /2019/02/12/privileged-containers.html

    on “CVE-2019-5736: runc container breakout”
  6. brauner · 2019-02-11

    Submitted CVE-2019-5736: Runtimes and the Curse of the Privileged Container as a story · 2 points

    HN discussion
  7. simosx · 2019-02-22
    A post by Christian Brauner (LXC/LXD developer) on how LXC and LXD are affected. In summary, unprivileged containers (as found in LXD) are not affected. https://brauner.github.io/2019/02/12/privileged-containers.h...

    Comment linking /2019/02/12/privileged-containers.html

    on “Breaking Out of Docker via RunC”
  8. brauner · 2019-01-10

    Submitted Android Binderfs as a story · 2 points

    HN discussion
  9. brauner · 2018-08-06

    Submitted Unprivileged File Capabilities as a story · 2 points

    HN discussion
  10. brauner · 2018-03-05

    Submitted Mutexes and fork()ing in Shared Libraries as a story · 2 points

    HN discussion
  11. brauner · 2018-02-20

    Submitted LXC 3.0: Removal of cgmanager and cgfs cgroup Drivers as a story · 2 points

    HN discussion
  12. brauner · 2018-02-27

    Submitted On the Way to LXC 3.0: Splitting Out Templates and Language Bindings as a story · 1 points

    HN discussion

Search all of HN for brauner.github.io