Tag: Docker

4 articles
Date Tue 10 May 2022
Author Mihail Kirov
Category Containers

Everyone knows about Docker but not a lot of people are aware of the underlying technologies used by it. In this blogpost we will analyze one of the most fundamental and powerful technologies hidden behind Docker - runc.

Date Tue 14 December 2021
Authors Fred Raynal, Mihail Kirov
Category Containers

It is written almost everywhere: do not expose the Docker socket on Linux! This is followed by the statement that doing so grants root access to the host. But why? What can be done and how? This is what we are about to explore in this article.

Date Thu 18 November 2021
Author Mihail Kirov
Category Containers

Process isolation is a key component for containers. One of the key underlying mechanisms are namespaces. In this second (and last) part of the series we examine the USER, MNT, UTS, IPC and CGROUP namespaces, and finally we combine everything to build a fully isolated environment for a process.

Date Tue 16 November 2021
Author Mihail Kirov
Category Containers

Process isolation is a key component for containers. One of the key underlying mechanisms are namespaces. We will explore what they are, and how they work, to build our own isolated container and better understand each piece.