December 2016
Intermediate to advanced
300 pages
6h 36m
English
Until now, we've looked at libvirt and full virtualization. But a new type of virtualization has been gaining traction, called containerization--more specifically, Docker containers.
When working with containers, administrators have to be well aware that containers do not virtualize everything: the Linux kernel itself is shared, and all software running inside the container is interacting with the Linux kernel, just like software running outside the container. That does not mean that containers don't isolate, though. They are built based on Linux features such as namespaces and control groups.
As the Linux kernel is shared, exploits on the kernel level impact the entire host and can compromise ...
Read now
Unlock full access