Cgroups、命名空间与更多：容器到底由什么构成

Jérôme Petazzoni explains how Linux containers are built from kernel features like cgroups, namespaces and SELinux. He demonstrates putting the pieces together by hand to make a container and compares runtimes and approaches like jails and zones.

Why HN likes it: HN recommends it as a talk that makes containers click, showing that containerization is not virtualization and demystifying what Docker does.

“I watched this talk couple of years ago that made docker/containers finally click for me.”