In this lesson, you will learn how Linux uses PID namespaces to trick a process into believing it is the only program running on the machine.
The Illusion of Singularity
Up until now, you have learned that every process has a unique PID assigned by the kernel, and all processes eventually trace their lineage back to a single init process (PID 1). In a standard environment, if you run ps aux, you see every process running on the system.
A PID Namespace breaks this global view. When you create a new PID namespace, the kernel essentially gives a specific group of processes their own private "view" of the process tree. Inside this private bubble, the first process you start is assigned PID 1. To that process, it is the init system—even though, from the perspective of the host system, it might be PID 4592.
How it Works
Think of it like a theater. The host system is the "real world" where thousands of people exist. A PID namespace is like a private screening room. The people inside the room don't know who is outside; they only know the people in their own room.
If you start a process in a new namespace, the kernel maps the PIDs differently:
- Inside the namespace: The process sees itself as PID 1.
- Outside the namespace (the host): The kernel assigns it a high, unique PID (e.g., 8821).
If that process forks a child, the child becomes PID 2 inside the namespace, but maybe PID 8822 on the host.
# Conceptual representation of the view:
[Host System] [Namespace A]
PID 1 (init) ---> PID 1 (sh)
PID 8821 (sh) ---> PID 2 (ls)
PID 8822 (ls)
Because the namespace process believes it is PID 1, it assumes the responsibilities of init. If it crashes, all other processes inside that namespace will be terminated by the kernel, just like the real init process governs the system. This isolation is a fundamental building block of container technology, allowing multiple "isolated systems" to run simultaneously without knowing they share the same physical hardware.
Key Takeaway: PID namespaces allow a process to see a private, restricted subset of the system's processes, where it starts as PID 1, effectively creating an isolated process universe.