Abstract: A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.

Abstract: A method and system for constructing a lightweight container-based user environment (CUE), and a medium, the method including: preparing, by a main process, for communication, cloning a child process, and then becoming a parent process; elevating, by the child process, permission, executing namespace isolation, and cloning a grandchild process, and setting, by the parent process, cgroups for the grandchild process; and setting, by the grandchild process, permission of the grandchild process to execute a command and a file, preparing an overlay file system, setting a hostname, restricting permission, and executing an initialization script to start the container. Multiple users are allowed to customize their own environments, enabling the users to customize their environments more flexibly, achieving privacy isolation, and making it easier and more secure to update a system. Therefore, it is particularly applicable to a high-performance computing cluster.