hackertube.io

Cgroups, namespaces, and beyond: what are containers made from?

Docker · talk · Watch on YouTube

Operating systems & kernelsCloud, DevOps & reliabilityLinux & open-source ecosystems

What it is

Jérôme Petazzoni explains how Linux containers are built from kernel features like cgroups, namespaces and SELinux. He demonstrates putting the pieces together by hand to make a container and compares runtimes and approaches like jails and zones.

Why Hacker News recommends it

HN recommends it as a talk that makes containers click, showing that containerization is not virtualization and demystifying what Docker does.

  • 4 people recommended it
  • 3 different months
  • 2 strong recommendations
  • first 2017, last 2023

What HN commenters said

  1. “I watched this talk couple of years ago that made docker/containers finally click for me.”

    Made containers finally click

    dominotw, 2017-12 · Strong recommendation · in “Demystifying container runtimes”

  2. “This topic is perfectly covered in a presentation by”

    Clarifies containerization is not virtualization

    dmpanch, 2023-06 · Strong recommendation · in “Build Your Own Docker with Linux Namespaces, Cgroups, and Chroot”

  3. “Then does a demo where is manually does what docker does”

    Talk with demo manually doing what Docker does

    antoncohen, 2017-12 · Recommendation · in “Ask HN: Good resources on learning how docker works under the hood?”

  4. “it doesn't hurt to hear the same ideas more than once.”

    One of several talks on building containers

    hardwaresofton, 2018-04 · Recommendation · in “A Workshop on Linux Containers: Rebuild Docker from Scratch”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: cgroups, namespaces, docker, containers, linux kernel

Also recommended by the same people