TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Learning containers from the bottom up

256 点作者 notkaiho超过 3 年前

6 条评论

kodah超过 3 年前
This is a great article.<p>I disagree with this:<p>&gt; Now, when you have a decent understanding of containers - from both the implementation and usage standpoints - it&#x27;s time to tell you the truth. Containers aren&#x27;t Linux processes!<p>This is a bit of wordplay, I&#x27;m assuming, in absence of a word that defines the operating system features that power the <i>concept of containers</i>. To Linux, there is no (to my knowledge) concept of a &quot;container&quot;. The container runtime runs your process(es) as the parent and uses the operating systems features to isolate it and restrict it&#x2F;them. A virtual machine would just be a full emulated version of this, rather than using the operating system to virtualize the network stack. The author is right in that there is no such thing as a <i>container</i>, but only as much as <i>containing is a thing you do</i>, imo. What users think of containers are still just processes though, and I don&#x27;t think that&#x27;s an entirely useless abstraction to be cognizant of.
评论 #29282952 未加载
评论 #29286137 未加载
评论 #29285238 未加载
评论 #29285008 未加载
评论 #29282685 未加载
评论 #29282944 未加载
kuizu超过 3 年前
A nice blog series explaining in detail each Linux kernel mechanism making up containers: <a href="https:&#x2F;&#x2F;www.schutzwerk.com&#x2F;en&#x2F;43&#x2F;posts&#x2F;linux_container_intro&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.schutzwerk.com&#x2F;en&#x2F;43&#x2F;posts&#x2F;linux_container_intro...</a>
评论 #29282972 未加载
musicale超过 3 年前
Docker and Kubernetes embody a number of design decisions that might be a good fit for some users (and for Google) but add more complexity and overhead than I usually need or want for my typical use case of basic isolation and resource limits.<p>Fortunately the container architecture is flexible so that you can use as much or as little of it as you like.<p>I also tend to think that if you want stronger isolation for security purposes then you will want a lightweight VM rather than a container (and if you are worried about side channels, probably hardware partitioning - good luck.)
porker超过 3 年前
For a quick overview of containers I found <a href="https:&#x2F;&#x2F;wizardzines.com&#x2F;zines&#x2F;containers&#x2F;" rel="nofollow">https:&#x2F;&#x2F;wizardzines.com&#x2F;zines&#x2F;containers&#x2F;</a> super helpful.
ashater超过 3 年前
Good article, steps one level below container managers like Docker or k8s. Obviously not the indepth of how Linux kernel manages container processes but a good write-up.
yencabulator超过 3 年前
&gt; ... but containers are needed to build images<p>Incorrect. The images are mere files(&#x2F;subtrees), and you can write one however you wish.