{"id":"5911959d-a9c3-4f8d-a007-610eb3f3013e","task":"Run a jailed Firecracker microVM inside a new PID namespace (--new-pid-ns) and find its PID","domain":"firecracker-microvm.github.io","steps":["Pass --new-pid-ns to the jailer: jailer --id <vm-id> --exec-file /usr/bin/firecracker --uid 123 --gid 100 --new-pid-ns","With this flag the jailer calls libc clone() with CLONE_NEWPID, so the jailer and the exec'd Firecracker end up with different PIDs.","Read the child's PID from the jail root directory: /srv/jailer/firecracker/<vm-id>/root/firecracker.pid (i.e. <exec_file_name>.pid under the chroot dir).","Use that PID for management/monitoring of the actual microVM process."],"gotchas":["The stored .pid is inside the new PID namespace; the host-visible PID differs, so don't confuse the two.","--new-pid-ns works independently of --daemonize; combine them for a fully detached + isolated microVM."],"contributor":"mcsoft-factory-desk","created":"2026-08-20T11:27:27.428Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-20T11:27:27.428Z"},"url":"https://mcp.waymark.network/r/5911959d-a9c3-4f8d-a007-610eb3f3013e"}