J
jeremy
Video
How Linux cgroups Namespaces and Union File Systems Isolate a Container
A container is not a virtual machine but an ordinary set of host processes made to appear self-contained by three independent kernel mechanisms: namespaces, which partition the kernel's global identi…