September 2022
Intermediate to advanced
384 pages
9h 13m
English

Containers build on a rich history of technologies designed to isolate one computer program from another while allowing many programs to share the same CPU, memory, storage, and network resources. Containers use fundamental capabilities of the Linux kernel, particularly namespaces, which create separate views of process identifiers, users, the filesystem, and network interfaces. Container runtimes use multiple types of namespaces to give each container an isolated view of the system.
In this chapter, we’ll consider some of the reasons for process isolation and look at how Linux has historically isolated processes. We’ll then ...
Read now
Unlock full access