good

Examples of successful patterns:

• Privileged user calling ccon:

  • Bind to a low numbered port in the host network namespace.
  • Create a new network namespace bridged to the host and bind to a low numbered port in the new network namespace.
  • Create a container, execute a process inside it, and delete the container with separate steps.

• Unprivileged user calling ccon:

  • Launch a container process that pivots to a local root.
  • Bind to a low numbered port in a new network namespace (via a new user namespace).
  • Launch a container process in a new freezer cgroup, removing that cgroup on exit.
  • Launch a container from an OCI bundle
    • OCI v0.1.0