Study. uk . com
  1. Home
  2. All questions
  3. Question 868

CKA study material · question 868 of 1000

In a node debug session, chroot /host fails with a permissions error. Why?

  1. The node's filesystem is mounted read-only
  2. The debug Pod runs in its own PID namespace
  3. The debug Pod is not privileged
  4. chroot is blocked by the default seccomp profile
Show the answer

Answer: C. The debug Pod is not privileged

A node debug Pod runs in the host IPC, network and PID namespaces but is not privileged, so operations needing superuser access can fail; --profile=sysadmin is the documented remedy.

Source: Debug Running Pods (Kubernetes) — Debugging via a shell on the node

Challenge yourself on this topic → Study as cards