Operating systems notes
Containers, Namespaces & cgroups
A container is not a tiny VM, it is an ordinary Linux process wearing a disguise. Every section is a drawn page beside a clear written explanation, about 18 minutes in all.
- Chapter 32 of 37
- About 18 minutes
- 8 sections
Sign in with Google or GitHub and you land straight on this page. DSA comes with the all labs plan and every ChaiCode batch.
In this chapter
- A container is not a VM
- The big idea: a process with a restricted view
- Namespaces: isolating what a process can see
- Building isolation by hand
- cgroups: limiting and accounting resources
- The container filesystem: layers and copy-on-write
- The ecosystem: images, runtimes & orchestrators
- Why engineers care
Next chapters
Read the whole chapter
Sign in and the chapter opens with every drawn page, and all 38 operating systems chapters beside it.
DSA comes with the all labs plan and every ChaiCode batch.