How it works...
Lightweight process virtualizations, or containers, make use of Linux kernel cgroups and namespace support. A namespace abstracts a global system resource so that a process in that namespace appears to have its own isolated instance of a resource. Namespaces include filesystems, processes, network, and user IDs, among other things. In basic terms, cgroups allow us to allocate resources among user defined process groups.
Containers can orchestrate via network sockets and can mount data volumes on the host system. It is common to use Docker volumes to write data from the container to the host, so little data needs to be written to the container itself. However, keeping data inside the container is also possible using Docker ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access