Systemd

• cgroup:
  • groups of processes named after a systemd service
  • leaving a cgroup i not possible for unprivileged processes
  • systemd-cgls shows cgroup hierarchy

New processes start when the user notifies the init daemon, which forks off without inheritance of user context

systemd-nspawn is like a better chroot

https://0pointer.de/blog/projects/systemd-for-admins-1.html