Which Linux kernel features make containers possible?
Namespaces isolate what a process sees (PID, network, mount, UTS, IPC, user). cgroups limit and account resources (CPU, memory, I/O). Union filesystems such as overlayfs provide layered images.
Namespaces isolate what a process sees (PID, network, mount, UTS, IPC, user). cgroups limit and account resources (CPU, memory, I/O). Union filesystems such as overlayfs provide layered images.