Blog

What a Container Is Made Of: Namespaces, Cgroups and Union Filesystem

A deep dive into the lowest layer: three Linux kernel features — namespaces (isolation), cgroups (resource limits) and union filesystem (layers) — turn an ordinary process into a container. With diagrams and commands you can verify yourself.