Skip to main content

Docker Architecture

Linux Namespaces and Cgroups

0:00
LearnStep 1/2

Container Isolation

Linux Namespaces and Cgroups

Namespaces (Isolation)

Namespaces provide isolation - each container sees its own isolated view:

NamespaceIsolates
PIDProcess IDs
NETNetwork interfaces, routing tables
MNTFilesystem mount points
UTSHostname and domain name
IPCInter-process communication
USERUser and group IDs
bash

Cgroups (Resource Limits)

Control groups limit and account for resource usage:

bash

Viewing Container Resources

bash