container

• Under the hood
  • Containers under the Hood
    • chroot: By changing the root we can isolate the process filesystem and protect the system filesystem from unwanted changes.
      • change the apparent root directory for a process (and its children).
    • namespace: create a sliced view on the system resources such as process IDs, mount points, networks, users, etc.
    • cgroup: restrict various computer resources for processes
  • Ervin Szilágyi - Containers: Under the Hood
  • Learning Containers From The Bottom Up
    • some containers can be implemented using mechanisms other than namespaces and cgroups.
• Docker
• podman
• k8s

container: a way of executing processes in isolation k8s: scale out by workflow