How Docker Works: Container Internals Under the Hood
How containers work under the hood: namespaces, cgroups v2, overlay2 storage and the runc runtime.
3 parts published
- 1 What Docker Actually Adds to Linux Isolation Primitives Start here What Docker added on top of the namespaces, cgroups and OverlayFS already in the Linux kernel, and why raw kernel interfaces needed a container runtime around them.
- 2 What Happens When You Type docker run? From CLI to containerd to runc Follow one docker run command through the docker CLI, the dockerd daemon, containerd over gRPC, containerd-shim and runc, the pieces that actually start a container.
- 3 OCI Specifications Explained: How runc and Container Images Actually Work How the Open Container Initiative standards fit together: Image Spec manifests, configuration JSON, layer diff tarballs, and the Runtime Spec filesystem bundle.