DevOps
How Docker actually works: cgroups and namespaces
A Docker container is not a lightweight virtual machine. It is a standard Linux process wearing two kernel hats: namespaces for isolation and cgroups for resource limits.
How it actually works
The engineering questions you get asked, and the bugs you actually hit. Drawn, one mechanism at a time, in the order the videos ship.