12 articles
Lock down your containers for production. Master Linux 'Capabilities' and 'Seccomp' profiles. Learn to remove the 'Root' power from within a container and restrict which kernel functions a process is allowed to call.
How does Linux manage 10,000 containers? Master the relationship between the Linux Kernel and Kubernetes (K8s). Understand the logic of the 'Pod', the 'CRI', and how the kernel handles K8s-defined networking and storage.
How did we get here? Trace the history of containerization. From the 1979 'chroot' jail to modern 'OCI' standards. Learn the difference between Docker, Containerd, and RunC. Understand why Docker is just a 'User Interface' for the kernel.
Peel back the layers of a container. Master 'OverlayFS' and Union Filesystems. Learn how Linux stacks multiple directories to create a single 'View'. Understand 'Copy-on-Write' and why container images are so space-efficient.
Keep your processes in check. Master Linux 'Control Groups' (Cgroups). Learn how the kernel limits CPU usage, RAM allocation, and Disk I/O speed. Understand why a single runaway container can't crash your entire server.
How does Docker actually work? Peek behind the curtain of Linux Namespaces. Learn how the kernel creates the 'Illusion' of a private system for a single process. Understand PID, Network, and Mount namespaces.
Start your container journey here. Learn the fundamental concept of a container, why it's different from a simple 'folder', and how it solves the 'it works on my machine' problem.
Look under the hood of Docker. Understand the relationship between the Client, the Host, and the Registry, and how images become containers.
Master the fundamental lifecycle of Docker. Understand how read-only layers form images and how the 'Writable Layer' makes them come alive as containers.
Review the fundamental split between static blueprints and live processes, and learn how this distinction shapes the way we build and share software.
The chicken and the egg. Learn how to run Docker commands inside a Docker container to build your application images within a GitLab pipeline.
Isolation and Portability. How to containerize Ollama for consistent deployment across any server.