Containers Knowledge-Base

Collection of knowledge on containers 🐋📦

Basics

• All things Linux containers
• Containers Resources
• Awesome Linux Containers
• Awesome Immutable
• What Is a Standard Container (2021 edition)
• lwn: Docker and the OCI container ecosystem
• reynardsec.com: Docker Security – Step-by-Step Hardening (Docker Hardening)

Namespaces

Digging into Linux namespaces

cgroups

• Introduction to cgroups
• Cgroups - Deep Dive into Resource Management in Kubernetes

Copy-on-write filesystems

• image-spec
• distribution-spec
• runtime-spec

Software

• Docker
• Podman
• CRI-O
• bubblewrap/flatpak
• containerd
• systemd-nspawn
• runc
• crun

Container Images

Building Images

Dockerfile/Containerfile

Layering, Builder Pattern, Multi-Arch builds

Running Containers

Rootless Containers

Talks

Containers at Facebook - Lindsay Salisbury

systemd, BTRFS, ...

https://www.cyphar.com/blog/post/20190121-ociv2-images-i-tar