Implementing eBPF for Granular Seccomp Filtering in Rootless Podman Containers
A practical guide to layering eBPF programs on top of seccomp filters for fine-grained syscall control inside rootless Podman containers. Walks through architecture, BPF CO-RE programs, seccomp notifier hooks, and production patterns.