Containers Knowledge-Base

Collection of knowledge on containers 🐋📦

Basics

• All things Linux containers
• Containers Resources
• Awesome Linux Containers
• Awesome Immutable
• What Is a Standard Container (2021 edition)
• lwn: Docker and the OCI container ecosystem
• reynardsec.com: Docker Security – Step-by-Step Hardening (Docker Hardening)

Namespaces

Digging into Linux namespaces

cgroups

• Introduction to cgroups
• Cgroups - Deep Dive into Resource Management in Kubernetes

Copy-on-write filesystems

• image-spec
• distribution-spec
• runtime-spec

Software

• Docker
• Podman
• CRI-O
• bubblewrap/flatpak
• containerd
• systemd-nspawn
• runc
• crun

Container Images

Building Images

Dockerfile/Containerfile

Layering, Builder Pattern, Multi-Arch builds

Running Containers

Rootless Containers

Playground Environment

Vagrantfile provides a reproducible development environment built via an Ansible playbook.

So far there is not much to see there, but the vision is to produce an environment with all needs to tinker with container software, to change it and to learn about it.

Talks

Containers at Facebook - Lindsay Salisbury

systemd, BTRFS, ...

https://www.cyphar.com/blog/post/20190121-ociv2-images-i-tar