Container security fundamentals: Exploring containers as processes

The post explains that containers are simply Linux processes and demonstrates how to use host tools such as ps, docker ps, and the /proc filesystem (including /proc/[PID]/root and environ) to inspect, troubleshoot, modify, and even terminate containerized workloads. It shows how process hierarchies reveal containerd shims, how to access and edit files within a container via the host, and warns about security implications like leaking environment variables from /proc. The article sets the stage for deeper dives into container isolation and filesystems in subsequent parts.