--- title: OPEN_TREE_NAMESPACE To Provide A Security & Performance... description: Linux 7.0 will introduce OPEN_TREE_NAMESPACE, a new flag for the open_tree() system call that significantly improves container launch performance. The feature... canonical: https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: OPEN_TREE_NAMESPACE To Provide A Security & Performance Win For Dealing With Containers | daily.dev og:description: Linux 7.0 will introduce OPEN_TREE_NAMESPACE, a new flag for the open_tree() system call that significantly improves container launch performance. The feature... og:url: https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq og:image: https://api.daily.dev/og/posts/BXw4sMehQ.png og:image:alt: OPEN_TREE_NAMESPACE To Provide A Security & Performance Win For Dealing With Containers og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # OPEN_TREE_NAMESPACE To Provide A Security & Performance Win For Dealing With Containers **[Phoronix](https://daily.dev/sources/phoronix)** · 3 min read · 0 upvotes · 0 comments ## Summary Linux 7.0 will introduce OPEN_TREE_NAMESPACE, a new flag for the open_tree() system call that significantly improves container launch performance. The feature eliminates wasteful copying of mount namespaces during container creation by allowing direct creation of new mount namespaces with only necessary mounts. Testing shows approximately 40% faster container creation (109k vs 73k containers in 60 seconds), with additional security benefits by preventing attacks that attempt to unmount container roots to access underlying mounts. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [NULLFS & OPEN\_TREE\_NAMESPACE Features Merged For Linux 7.0](https://daily.dev/posts/nullfs-open-tree-namespace-features-merged-for-linux-7-0-jb03udxrl) · Phoronix · 0 upvotes · 0 comments - [Mount Mayhem at Netflix: Scaling Containers on Modern CPUs](https://daily.dev/posts/mount-mayhem-at-netflix-scaling-containers-on-modern-cpus-ckvvan6ve) · Netflix TechBlog · 50 upvotes · 1 comments - [Netflix Found a Faster Way to Load Containers](https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep) · Cloud Native Now · 0 upvotes · 0 comments - [Linux 7.2 Can Significantly Lower Container Exit/Unmount Latency](https://daily.dev/posts/linux-7-2-can-significantly-lower-container-exit-unmount-latency-cjhzjzwjo) · Phoronix · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#performance](https://daily.dev/tags/performance), [#linux](https://daily.dev/tags/linux), [#containers](https://daily.dev/tags/containers) [View this post on daily.dev](https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"OPEN_TREE_NAMESPACE To Provide A Security & Performance Win For Dealing With Containers","url":"https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq"},"datePublished":"2026-01-19T19:57:53.480Z","dateModified":"2026-01-19T19:58:14.130Z","description":"Linux 7.0 will introduce OPEN_TREE_NAMESPACE, a new flag for the open_tree() system call that significantly improves container launch performance. The feature...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4124905cddf35c198082ae642e9ef43f?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4124905cddf35c198082ae642e9ef43f?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"Phoronix","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Phoronix","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/6a26ba379dd64932830aa0c9803dd7ee","url":"https://daily.dev/sources/phoronix"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/open-tree-namespace-to-provide-a-security-performance-win-for-dealing-with-containers-bxw4smehq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,performance,linux,containers","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Phoronix","item":"https://daily.dev/sources/phoronix"},{"@type":"ListItem","position":3,"name":"OPEN_TREE_NAMESPACE To Provide A Security & Performance Win For Dealing With Containers"}]} ```