What do Linux namespaces do?
They give a process its own view of a system resource: process IDs, network interfaces, mount points, hostname, inter-process communication and user IDs. Inside its namespaces the container sees only its own processes and filesystem, even though they all run on the same kernel.
Answered in
What docker run Actually Does: Daemon, containerd, runc, Namespaces, cgroupsA container is a normal Linux process with isolation and limits. Follow one docker run from the CLI through dockerd and containerd to kernel namespaces.
Read the full analysisOther questions this article answers
More developer tooling questions
- What are the five fields of a cron expression?
- What does */5 mean in cron?
- Why does my script work in the terminal but fail in cron?
- What happens if a cron job is still running when the next one starts?
- Is a container a lightweight virtual machine?
- What do cgroups do?
- Why is access to the Docker socket dangerous?
Every answer on Crashtech is written by the editor of the article it comes from — never auto-summarised. Browse all answers or the Developer Tooling beat.