#docker

1 articles

01 ·OS & Runtime·★ MEMBER·12 min read Containers from Scratch — What namespaces and cgroups Actually Are A container is not a lightweight virtual machine — it is an ordinary process with its view restricted. We take it apart into namespaces (what you can see), cgroups (how much you may use), and images (stacked read-only layers), from the first analogy through overlayfs, cpu.max, and how to read exit code 137.