summaryrefslogtreecommitdiffstats
path: root/po/de/man7/cgroup_namespaces.7.po
blob: 9b6e969ce4d5e2a84bb60378b5f8c86cb05d4acf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
# German translation of manpages
# This file is distributed under the same license as the manpages-l10n package.
# Copyright © of this file:
# Helge Kreutzmann <debian@helgefjell.de>, 2021.
msgid ""
msgstr ""
"Project-Id-Version: manpages-l10n 4.17.0\n"
"POT-Creation-Date: 2024-06-01 05:44+0200\n"
"PO-Revision-Date: 2023-02-18 08:13+0100\n"
"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
"Language-Team: German <debian-l10n-german@lists.debian.org>\n"
"Language: de\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"

#. type: TH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "cgroup_namespaces"
msgstr "cgroup_namespaces"

#. type: TH
#: archlinux debian-unstable opensuse-tumbleweed
#, no-wrap
msgid "2024-05-02"
msgstr "2. Mai 2024"

#. type: TH
#: archlinux debian-unstable
#, no-wrap
msgid "Linux man-pages 6.8"
msgstr "Linux man-pages 6.8"

#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "NAME"
msgstr "BEZEICHNUNG"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "cgroup_namespaces - overview of Linux cgroup namespaces"
msgstr "cgroup_namespaces - Überblick über Linux-Cgroup-Namensräume"

#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "DESCRIPTION"
msgstr "BESCHREIBUNG"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "For an overview of namespaces, see B<namespaces>(7)."
msgstr "Für einen Überblick über Namensräume, siehe B<namespaces>(7)."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Cgroup namespaces virtualize the view of a process's cgroups (see "
"B<cgroups>(7))  as seen via I</proc/>pidI</cgroup> and I</proc/>pidI</"
"mountinfo>."
msgstr ""
"Cgroup-Namensräume virtualisieren den Blick auf die Cgroups eines Prozesses "
"(siehe B<cgroups>(7)), wie er mittels I</proc/>PIDI</cgroup> und I</proc/"
">PIDI</mountinfo> gesehen wird."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Each cgroup namespace has its own set of cgroup root directories.  These "
"root directories are the base points for the relative locations displayed in "
"the corresponding records in the I</proc/>pidI</cgroup> file.  When a "
"process creates a new cgroup namespace using B<clone>(2)  or B<unshare>(2)  "
"with the B<CLONE_NEWCGROUP> flag, its current cgroups directories become the "
"cgroup root directories of the new namespace.  (This applies both for the "
"cgroups version 1 hierarchies and the cgroups version 2 unified hierarchy.)"
msgstr ""
"Jeder Cgroup-Namensraum hat seine eigene Gruppe an Cgroup-"
"Wurzelverzeichnissen. Diese Wurzelverzeichnisse sind die Basispunkte der "
"relativen Orte, die in den entsprechenden Datensätzen in der Datei I</proc/"
">PIDI</cgroup> angezeigt werden. Wenn ein Prozess mittels B<clone>(2) oder "
"B<unshare>(2) mit dem Schalter B<CLONE_NEWCGROUP> einen neuen Cgroup-"
"Namensraum erstellt, werden seine aktuellen Cgroup-Verzeichnisse das Cgroup-"
"Wurzelverzeichnis des neuen Namensraumes. (Dies gilt sowohl für die Cgroup-"
"Version-1-Hierarchien als auch die vereinigte Cgroup-Version-2-Hierarchie.)"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"When reading the cgroup memberships of a \"target\" process from I</proc/"
">pidI</cgroup>, the pathname shown in the third field of each record will be "
"relative to the reading process's root directory for the corresponding "
"cgroup hierarchy.  If the cgroup directory of the target process lies "
"outside the root directory of the reading process's cgroup namespace, then "
"the pathname will show I<../> entries for each ancestor level in the cgroup "
"hierarchy."
msgstr ""
"Wenn die Cgroup-Mitgliedschaft eines »Ziel«-Prozesses aus I</proc/>PIDI</"
"cgroup> gelesen wird, wird der im dritten Feld jedes Datensatzes angezeigte "
"Pfadname relativ zu dem Wurzelverzeichnis der entsprechenden Cgroup-"
"Hierarchie des lesenden Prozesses sein. Falls das Cgroup-Verzeichnis des "
"Zielprozesses außerhalb des Wurzelverzeichnisses des Cgroup-Namensraums des "
"lesenden Prozesses liegt, dann wird der Pfadname I<../>-Einträge für jede "
"Vorgängerstufe in der Cgroup-Hierarchie anzeigen."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The following shell session demonstrates the effect of creating a new cgroup "
"namespace."
msgstr ""
"Die folgende Shell-Sitzung zeigt die Auswirkung der Erstellung eines neuen "
"Cgroup-Namensraumes."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"First, (as superuser) in a shell in the initial cgroup namespace, we create "
"a child cgroup in the I<freezer> hierarchy, and place a process in that "
"cgroup that we will use as part of the demonstration below:"
msgstr ""
"Zuerst wird (als Systemverwalter) in einer Shell im anfänglichen Cgroup-"
"Namensraum eine Nachfolger-Cgroup in der I<freezer>-Hierarchie erstellt und "
"ein Prozess in dieser Cgroup abgelegt, der als Teil der nachfolgenden "
"Vorstellung verwandt wird:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"# B<mkdir -p /sys/fs/cgroup/freezer/sub2>\n"
"# B<sleep 10000 &>     # Create a process that lives for a while\n"
"[1] 20124\n"
"# B<echo 20124 E<gt> /sys/fs/cgroup/freezer/sub2/cgroup.procs>\n"
msgstr ""
"# B<mkdir -p /sys/fs/cgroup/freezer/sub2>\n"
"# B<sleep 10000 &>     # Erzeugung eines Unterprozesses, der eine Zeit lebt\n"
"[1] 20124\n"
"# B<echo 20124 E<gt> /sys/fs/cgroup/freezer/sub2/cgroup.procs>\n"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"We then create another child cgroup in the I<freezer> hierarchy and put the "
"shell into that cgroup:"
msgstr ""
"Dann wird eine andere Cgroup in der I<freezer>-Hierachie erstellt und die "
"Shell in diese Gruppe versetzt:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"# B<mkdir -p /sys/fs/cgroup/freezer/sub>\n"
"# B<echo $$>                      # Show PID of this shell\n"
"30655\n"
"# B<echo 30655 E<gt> /sys/fs/cgroup/freezer/sub/cgroup.procs>\n"
"# B<cat /proc/self/cgroup | grep freezer>\n"
"7:freezer:/sub\n"
msgstr ""
"# B<mkdir -p /sys/fs/cgroup/freezer/sub>\n"
"# B<echo $$>                      # PID dieser Shell zeigen\n"
"30655\n"
"# B<echo 30655 E<gt> /sys/fs/cgroup/freezer/sub/cgroup.procs>\n"
"# B<cat /proc/self/cgroup | grep freezer>\n"
"7:freezer:/sub\n"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Next, we use B<unshare>(1)  to create a process running a new shell in new "
"cgroup and mount namespaces:"
msgstr ""
"Als nächstes wird B<unshare>(1) verwandt, um einen Prozess zu erzeugen, der "
"in einer neuen Shell in dem neuen Cgroup- und Einhängenamensraum läuft:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "# B<PS1=\"sh2# \" unshare -Cm bash>\n"
msgstr "# B<PS1=\"sh2# \" unshare -Cm bash>\n"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"From the new shell started by B<unshare>(1), we then inspect the I</proc/"
">pidI</cgroup> files of, respectively, the new shell, a process that is in "
"the initial cgroup namespace (I<init>, with PID 1), and the process in the "
"sibling cgroup (I<sub2>):"
msgstr ""
"Von der neuen durch B<unshare>(1) gestarteten Shell werden dann die Dateien "
"I</proc/>PIDI</cgroup> der neuen Shell, eines Prozesse in dem anfänglichen "
"Cgroup-Namensraum ((I<init> mit PID 1) bzw. des Prozesses in der "
"benachbarten Cgroup (I<sub2>) untersucht:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"sh2# B<cat /proc/self/cgroup | grep freezer>\n"
"7:freezer:/\n"
"sh2# B<cat /proc/1/cgroup | grep freezer>\n"
"7:freezer:/..\n"
"sh2# B<cat /proc/20124/cgroup | grep freezer>\n"
"7:freezer:/../sub2\n"
msgstr ""
"sh2# B<cat /proc/self/cgroup | grep freezer>\n"
"7:freezer:/\n"
"sh2# B<cat /proc/1/cgroup | grep freezer>\n"
"7:freezer:/..\n"
"sh2# B<cat /proc/20124/cgroup | grep freezer>\n"
"7:freezer:/../sub2\n"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"From the output of the first command, we see that the freezer cgroup "
"membership of the new shell (which is in the same cgroup as the initial "
"shell)  is shown defined relative to the freezer cgroup root directory that "
"was established when the new cgroup namespace was created.  (In absolute "
"terms, the new shell is in the I</sub> freezer cgroup, and the root "
"directory of the freezer cgroup hierarchy in the new cgroup namespace is "
"also I</sub>.  Thus, the new shell's cgroup membership is displayed as "
"\\[aq]/\\[aq].)"
msgstr ""
"In der Ausgabe des ersten Befehls kann gesehen werden, dass die Freezer-"
"Cgroup-Mitgliedschaft der neuen Shell (die in der gleichen Cgroup wie die "
"anfängliche Shell ist) relativ zum Wurzelverzeichnis der Freezer-Cgroup "
"definiert angezeigt wird, die etabliert wurde, als der neue Cgroup-"
"Namensraum erstellt wurde. (Absolut gesehen ist die neue Shell in der "
"Freezer-Cgroup I</sub> und das Wurzelverzeichnis der Freezer-Cgroup-"
"Hierarchie in dem neuen Cgroup-Namensraum auch I</sub>. Daher wird die "
"Cgroup-Mitgliedschaft der neuen Shell als »/« angezeigt.)"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"However, when we look in I</proc/self/mountinfo> we see the following "
"anomaly:"
msgstr ""
"Wird allerdings in I</proc/self/mountinfo> geschaut, taucht folgende "
"Anomalie auf:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"sh2# B<cat /proc/self/mountinfo | grep freezer>\n"
"155 145 0:32 /.. /sys/fs/cgroup/freezer ...\n"
msgstr ""
"sh2# B<cat /proc/self/mountinfo | grep freezer>\n"
"155 145 0:32 /.. /sys/fs/cgroup/freezer …\n"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The fourth field of this line (I</..>)  should show the directory in the "
"cgroup filesystem which forms the root of this mount.  Since by the "
"definition of cgroup namespaces, the process's current freezer cgroup "
"directory became its root freezer cgroup directory, we should see \\[aq]/"
"\\[aq] in this field.  The problem here is that we are seeing a mount entry "
"for the cgroup filesystem corresponding to the initial cgroup namespace "
"(whose cgroup filesystem is indeed rooted at the parent directory of "
"I<sub>).  To fix this problem, we must remount the freezer cgroup filesystem "
"from the new shell (i.e., perform the mount from a process that is in the "
"new cgroup namespace), after which we see the expected results:"
msgstr ""
"Das vierte Feld dieser Zeile (I</..>) sollte das Verzeichnis in dem Cgroup-"
"Dateisystem anzeigen, das die Wurzel dieser Einhängung formt. Da per "
"Definition von Cgroup-Namensräumen das aktuelle Freezer-Cgroup-Verzeichnis "
"des aktuellen Prozesses sein Wurzel-Freezer-Cgroup-Verzeichnis wurde, sollte "
"in diesem Feld »/« auftauchen. Das Problem hier ist, dass ein "
"Einhängeeintrag für das Cgroup-Dateisystem gezeigt wird, das dem "
"anfänglichen Cgroup-Namensraum entspricht (dessen Cgroup-Dateisystem "
"tatsächlich am übergeordneten Verzeichnis von I<sub> verwurzelt ist). Um "
"dieses Problem zu beheben, muss das Freezer-Cgroup-Dateisystem aus der neuen "
"Shell neu eingehängt werden (d.h. die Einhängung muss von einem Prozess "
"durchgeführt werden, der in dem neuen Cgroup-Namensraum ist). Danach kann "
"das erwartete Ergebnis gesehen werden:"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"sh2# B<mount --make-rslave />     # Don\\[aq]t propagate mount events\n"
"                               # to other namespaces\n"
"sh2# B<umount /sys/fs/cgroup/freezer>\n"
"sh2# B<mount -t cgroup -o freezer freezer /sys/fs/cgroup/freezer>\n"
"sh2# B<cat /proc/self/mountinfo | grep freezer>\n"
"155 145 0:32 / /sys/fs/cgroup/freezer rw,relatime ...\n"
msgstr ""
"sh2# B<mount --make-rslave />     # Einhänge-Ereignisse nicht in\n"
"                               # andere Namensräume weiterleiten\n"
"sh2# B<umount /sys/fs/cgroup/freezer>\n"
"sh2# B<mount -t cgroup -o freezer freezer /sys/fs/cgroup/freezer>\n"
"sh2# B<cat /proc/self/mountinfo | grep freezer>\n"
"155 145 0:32 / /sys/fs/cgroup/freezer rw,relatime …\n"

#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "STANDARDS"
msgstr "STANDARDS"

#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid "Linux."
msgstr "Linux."

#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "NOTES"
msgstr "ANMERKUNGEN"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Use of cgroup namespaces requires a kernel that is configured with the "
"B<CONFIG_CGROUPS> option."
msgstr ""
"Die Verwendung von Cgroup-Namensräumen benötigt einen Kernel, der mit der "
"Option B<CONFIG_CGROUPS> konfiguriert ist."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The virtualization provided by cgroup namespaces serves a number of purposes:"
msgstr ""
"Die durch Cgroup-Namensräume bereitgestellte Virtualisierung dient einer "
"Reihe von Zwecken:"

#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "\\[bu]"
msgstr "\\[bu]"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"It prevents information leaks whereby cgroup directory paths outside of a "
"container would otherwise be visible to processes in the container.  Such "
"leakages could, for example, reveal information about the container "
"framework to containerized applications."
msgstr ""
"Sie verhindert Informationslecks, durch die Cgroup-Verzeichnispfade "
"außerhalb eines Containers andernfalls für Prozesse innerhalb des Containers "
"sichtbar sind. Solche Lecks könnten beispielsweise Informationen über das "
"umgebende Container-System an Anwendungen innerhalb von Containern "
"offenlegen."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"It eases tasks such as container migration.  The virtualization provided by "
"cgroup namespaces allows containers to be isolated from knowledge of the "
"pathnames of ancestor cgroups.  Without such isolation, the full cgroup "
"pathnames (displayed in I</proc/self/cgroups>)  would need to be replicated "
"on the target system when migrating a container; those pathnames would also "
"need to be unique, so that they don't conflict with other pathnames on the "
"target system."
msgstr ""
"Sie erleichtern Aufgaben wie Container-Migration. Die durch Cgroup-"
"Namensräume bereitgestellte Virtualisierung erlaubt es, Container vom Wissen "
"über die Pfadnamen von Vorgängern-Cgroups zu isolieren. Ohne solche "
"Isolierungen müssten die vollständigen Cgroup-Pfadnamen (angezeigt in I</"
"proc/self/cgroups>) auf dem Zielsystem bei der Migration eines Containers "
"repliziert werden; diese Pfadnamen müssten auch eindeutig sein, so dass sie "
"nicht zu anderen Pfadnamen auf dem Zielsystem in Konflikt stehen."

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"It allows better confinement of containerized processes, because it is "
"possible to mount the container's cgroup filesystems such that the container "
"processes can't gain access to ancestor cgroup directories.  Consider, for "
"example, the following scenario:"
msgstr ""
"Sie erlauben bessere Einsperrungen von Prozessen in Containern, da es "
"möglich ist, das Cgroup-Dateisystem des Containers so einzuhängen, dass der "
"Prozess im Container keinen Zugriff auf die Vorgänger-Cgroup-Verzeichnisse "
"erlangen kann. Betrachten Sie beispielsweise folgendes Szenario:"

# WONTFIX user ID → UID // Upstream: Globally move to "user ID"
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "We have a cgroup directory, I</cg/1>, that is owned by user ID 9000."
msgstr ""
"Es gibt ein Cgroup-Verzeichnis I</cg/1>, das der Benutzerkennung 9000 gehört."

# WONTFIX user ID → UID  // Upstream: Globally move to "user ID"
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"We have a process, I<X>, also owned by user ID 9000, that is namespaced "
"under the cgroup I</cg/1/2> (i.e., I<X> was placed in a new cgroup namespace "
"via B<clone>(2)  or B<unshare>(2)  with the B<CLONE_NEWCGROUP> flag)."
msgstr ""
"Es gibt einen Prozess I<X>, der auch der Benutzerkennung 9000 gehört, der im "
"Namensraum unterhalb der Cgroup I</cg/1/2> ist (d.h. I<X> wurde in einen "
"neuen Cgroup-Namensraum mittels B<clone>(2) oder B<unshare>(2) mit dem "
"Schalter B<CLONE_NEWCGROUP> gebracht)."

# WONTFIX user ID → UID  // Upstream: Globally move to "user ID"
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"In the absence of cgroup namespacing, because the cgroup directory I</cg/1> "
"is owned (and writable) by UID 9000 and process I<X> is also owned by user "
"ID 9000, process I<X> would be able to modify the contents of cgroups files "
"(i.e., change cgroup settings) not only in I</cg/1/2> but also in the "
"ancestor cgroup directory I</cg/1>.  Namespacing process I<X> under the "
"cgroup directory I</cg/1/2>, in combination with suitable mount operations "
"for the cgroup filesystem (as shown above), prevents it modifying files in "
"I</cg/1>, since it cannot even see the contents of that directory (or of "
"further removed cgroup ancestor directories).  Combined with correct "
"enforcement of hierarchical limits, this prevents process I<X> from escaping "
"the limits imposed by ancestor cgroups."
msgstr ""
"Da das Cgroup-Verzeichnis I</cg/1> der UID 9000 gehört (und für sie "
"schreibbar ist) und I<X> auch der UID 9000 gehört, wäre der Prozess I<X>, in "
"Abwesenheit von Cgroup-Namensräumen, in der Lage, die Inhalte der Cgroup-"
"Dateien zu verändern (d.h. die Cgroup-Einstellungen zu ändern), nicht nur in "
"I</cg/1/2>, sondern auch in dem Vorgänger-Cgroup-Verzeichnis I</cg/1>. Da "
"der Prozess I<X> im Namensraum unter dem Cgroup-Verzeichnis I</cg/1/2> ist, "
"wird, in Zusammenhang mit geeigneten Einhängeaktionen für das Cgroup-"
"Dateisystem (wie oben gezeigt), verhindert, dass er Dateien in I</cg/1> "
"verändert, da er noch nicht einmal die Inhalte dieses Verzeichnisses (oder "
"von weiter entfernten Cgroup-Vorgänger-Verzeichnissen) sehen kann. In "
"Zusammenspiel mit der korrekten Durchsetzung von hierarchischen "
"Beschränkungen verhindert dies, dass Prozess I<X> diesen von den Vorgänger-"
"Cgroups auferlegten Beschränkungen entkommt."

#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "SEE ALSO"
msgstr "SIEHE AUCH"

#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"B<unshare>(1), B<clone>(2), B<setns>(2), B<unshare>(2), B<proc>(5), "
"B<cgroups>(7), B<credentials>(7), B<namespaces>(7), B<user_namespaces>(7)"
msgstr ""
"B<unshare>(1), B<clone>(2), B<setns>(2), B<unshare>(2), B<proc>(5), "
"B<cgroups>(7), B<credentials>(7), B<namespaces>(7), B<user_namespaces>(7)"

#. type: TH
#: debian-bookworm
#, no-wrap
msgid "2023-02-05"
msgstr "5. Februar 2023"

#. type: TH
#: debian-bookworm
#, no-wrap
msgid "Linux man-pages 6.03"
msgstr "Linux man-pages 6.03"

#. type: Plain text
#: debian-bookworm
msgid "Namespaces are a Linux-specific feature."
msgstr "Namensräume sind eine Linux-spezifische Funktionalität."

#. type: TH
#: fedora-40 fedora-rawhide mageia-cauldron
#, no-wrap
msgid "2023-10-31"
msgstr "31. Oktober 2023"

#. type: TH
#: fedora-40 mageia-cauldron
#, no-wrap
msgid "Linux man-pages 6.06"
msgstr "Linux man-pages 6.06"

#. type: TH
#: fedora-rawhide
#, no-wrap
msgid "Linux man-pages 6.7"
msgstr "Linux man-pages 6.7"

#. type: TH
#: opensuse-leap-15-6
#, no-wrap
msgid "2023-03-30"
msgstr "30. März 2023"

#. type: TH
#: opensuse-leap-15-6
#, no-wrap
msgid "Linux man-pages 6.04"
msgstr "Linux-Handbuchseiten 6.04"

#. type: TH
#: opensuse-tumbleweed
#, no-wrap
msgid "Linux man-pages (unreleased)"
msgstr "Linux man-pages (unveröffentlicht)"