公开(公告)号：US11500666B2

公开(公告)日：2022-11-15

申请号：US16777516

申请日：2020-01-30

申请人： HUAWEI TECHNOLOGIES CO., LTD.

发明人： Guocheng Zhong ,  Liang Zhang ,  Jianrui Yang ,  Jinmiao Liu

IPC分类号： G06F9/455 ,  G06F9/54 ,  G06F9/30

摘要： A container isolation method for a netlink resource includes receiving, by a kernel executed by a processor, a trigger instruction from an application program. The method also includes creating, by the kernel according to the trigger instruction, a container corresponding to the application program, creating a netlink namespace for the container, and sending a notification to the application program indicating that the netlink namespace is created. The method further includes receiving, by the kernel, a netlink message from the container, wherein the netlink message comprises entries generated when the container runs. The method additionally includes storing, by the kernel, the entries based on an identifier of the netlink namespace for the container, to send an entry required by the container to user space of the container.