November 2018
Intermediate to advanced
390 pages
10h 8m
English
A container is typically dependent on the host's operating system/kernel to deftly get and use various compute, network, and storage resources of the host machine in an optimal manner. Containers innately use the resource isolation features of the Linux kernel, such as kernel namespaces. This namespace mechanism isolates an application's view of the operating environment, including process trees, network, user IDs, and mounted file systems. The other vital feature being directly provided by kernel is cgroups, which provides the resource limiting capability. The main resources include the CPU/cores, memory, block I/O, and network. The third feature is none other than the union-capable file system, such as AUFS ...
Read now
Unlock full access