Method and system for constructing lightweight container-based user environment (CUE), and medium

A method for constructing a lightweight container-based user environment (CUE), wherein the method comprises the following steps:

• (1) preparing, by a main process used to execute user environment construction, a socket pair for interprocess communication, calling a clone function, clone( ), to obtain a child process, and serving the main process as a parent process of the child process;
• (2) elevating permission of the child process to root, executing namespace isolation, calling the clone function, clone( ), to obtain a grandchild process, and sending a process identification (PID) of the grandchild process to the parent process, and setting, by the parent process, cgroups for the grandchild process according to the process identification (PID);
• and
• (3) setting, by the grandchild process, permission of the grandchild process to execute a command and a file, then as an independent process, sequentially preparing an overlay file system of the grandchild process, setting a hostname, and limiting permission by using a capability mechanism of a Linux kernel, executing an initialization script, init.sh, and finally constructing a container according to the initialization script.