Namespaces Docker containers are primarily built from two Linux primitives - cgroups (covered last time) and namespaces . Cgroups cover...

Control groups , a.k.a. cgroups , controls the resources that a process or group of processes can use. This includes things like memory,...

System Calls All applications run in user space. Applications can make system calls, which involve interacting with the kernel. Since all...