Cgroups, namespaces, and beyond: what are containers made from?

with Jérôme Petazzoni, Tinkerer Extraordinaire, Docker

Linux containers are different from Solaris Zones or BSD Jails: they use discrete kernel features like cgroups, namespaces, SELinux, and more. We will describe those mechanisms in depth, as well as demo how to put them together to produce a container. We will also highlight how different container runtimes compare to each other.

--

Docker is an open platform for developers and system administrators to build, ship and run distributed applications. With Docker, IT organizations shrink application delivery from months to minutes, frictionlessly move workloads between data centers and the cloud and can achieve up to 20X greater efficiency in their use of computing resources. Inspired by an active community and by transparent, open source innovation, Docker containers have been downloaded more than 700 million times and Docker is used by millions of developers across thousands of the world’s most innovative organizations, including eBay, Baidu, the BBC, Goldman Sachs, Groupon, ING, Yelp, and Spotify. Docker’s rapid adoption has catalyzed an active ecosystem, resulting in more than 180,000 “Dockerized” applications, over 40 Docker-related startups and integration partnerships with AWS, Cloud Foundry, Google, IBM, Microsoft, OpenStack, Rackspace, Red Hat and VMware.

[nelsonjoppi]

- What is a container? 2:40
- Control Groups. 5:12
- Different type of CGroups: 7:05
- Namespaces: 24:43
- Container runtimes (cgroups + namespaces): 35:51

[omerpriel]

For 8 years since this video came out. And still he is the only one who explained docker really well
thank you very much

[rschmidtzalles]

After 4 years, this is one the best talks about docker

[alexjswill]

Saw this in 2020 unfortunately. This talk is so awesome. Should have saw this before.Thanks Jerome!

[sachinmainkar]

This has to be the first material any newcomer like me, to cgroups and namespaces encounters. Then read or listen to others to get more details. Merci beaucoup Monsieur !

[madsk]

Great talk. Went far further than most materials on (pure) docker. (and containers in general)

[vladbagbuss]

Awesome talk! thanks for uploading the vid.

[deeptivaidyula]

Very well presented. Thank you for uploading!

[MohamedAnsari_H]

This is the best place to start for someone coming from Linux

[spillai]

Notes:
- What is a container? 2:40
- Control Groups. 5:12
- Different type of CGroups: 7:05

[josephroland]

This is so interesting, simply the best, in this presentation i get to understand how docker works under the hood.

[sntshkmr]

Bawandarful! Got to learn a lot about Linux kernel.

[rakra]

The moment slides are replaced by the speaker, the line of thought/understanding is lost. The slides must be visible all the time. Great talk but bad camera placement.

[patmansf]

Are there more details on the page overhead accounting (at 13:16)?

Specifically what boot time (or kernel config) options disable it?

[ArmenManukyan]

Funny that cgroups2 allows now to control percentage as well.

[dmytrohuz]

could someone explain or recommend something to read for understanding what and why is going on there with mount/unmount commands in demo project in the end.

[teddyzhai]

great talk. please persistently show the slides rather than full screen only to the presenter. sometimes it is hard to corresponds his explanation to the bullet points.

[imanebt]

Thank you for this talk! By curiosity, are there open-source or on-the-market container runtimes that are not based on namespaces and cgroups ?

[uwstvnz]

can someone help to explain why there is ubuntu and alpine docker image? how can ubuntu / alpine linux distribution live inside container? I dont understand!!!!

[riderblack]

it is too complex to understand without a specilized backgroun. Anyone knows a refrence to start with understanding what he meant???