sp26-cs537 cs537
Lecture 24 - Containers Lecture 24 - Containers
Content locked
The catalog is public. Reading this content requires approved access.
Sign in to readLecture 24 - Containers
Motivation: Packaging
What is a Container?
Process vs Container vs VM
A Very Brief History
Three Mechanisms Build a Container
Namespaces
The Eight Namespace Kinds
PID Namespace Example
Mount Namespace
User Namespace — The Rootless Trick
How Namespaces Are Made (Vocab)
cgroups
Controllers
CPU controller = CFS per group
Memory — OOM Kills the Right Tenant
chroot — File System Isolation
Where Does the chroot Come From? overlayfs
What is a Container Image?
Dockerfile → Layers
overlayfs in One Picture
Why Copy-on-Write Matters
Putting It Together: docker run
What docker run Actually Does
OCI Split
When the Kernel Isn’t Enough
Summary
Source