Skip to content
Hallway
0:00 / 0:00

#namespaces#cgroups#docker

Golang UK Conf. 2016 - Liz Rice - What is a container, really? Let's write one in Go from scratch

GopherCon UK

18K subscribers • 1 video on Hallway

YouTube
  • Recommended by 3 people: 3 on Hacker News.
  • Presented by Liz Rice
  • May be out of date. Uploaded 10 years ago, in an area where tools change fast.

Intermediate. Assumes working knowledge.

32K views10 years ago3 recommendations

Systems programmingCloud and DevOpsGoOperating systemsLinux

Liz Rice demystifies containers by building one from scratch in about 100 lines of Go using Linux namespaces and cgroups.

Everyone has heard of Docker, but what is a container? Is it really "a lightweight VM"? In this talk we'll dispel the magic by writing a container in about 100 lines of Go.

Why it's here

3 people recommend this

What people say. Widely recommended as one of the clearest and most fundamental explanations of how containers work under the hood.

e1gon Hacker News • Recommends

On “Dropping Linux capabilities to improve container security”

…version of Ubuntu/Debian/Fedora or whatever the person is most comfortable with outside of Docker. edit PS: One common exception to this philosophy is a short-lived container for admin/management/debugging. Having a full OS with devel/admin tools is useful for investigation/maintenance purposes, then you kill it and nothing is changed in prod. 1 link to this video…
View on Hacker News

archevelon Hacker News • Recommends

On “Linux Container Internals”

I started by watching link to this video and reading link Also "man namespaces" on a linux machine will give some deeper documentation.
View on Hacker News

hardwaresoftonon Hacker News • Recommends

On “Ask HN: Good resources on learning how docker works under the hood?”

Super late to this thread but the best video I've ever seen on how docker/containers work is this one: Jessica Frazelle's (docker core maintainer) talk on how to build containers in pure bash and C: link There's also this one, which is similar: link to this video
View on Hacker News

hardwaresoftonon Hacker News • Recommends

On “A Workshop on Linux Containers: Rebuild Docker from Scratch”

In the same vein: Building a container from scratch in Go (Liz Rice) @ Container Camp 2016 -> link What's a container really let's write one in go from sctach (Liz Rice) @ Golang UK Conference -> link to this video Cgroups, Namespaces and beyond: What are containers made from (Jerome Petazzoni) @ DockerCon 2015 - link Building Containers in Pure Bash and C (Jessica Frazelle) @ ContainerSummit 2016: link First two are basically the same talk, but it doesn't hurt to hear the same ideas more than once.
View on Hacker News

hardwaresoftonon Hacker News • Recommends

On “Billions wasted on Hadoop startups, the same will eventually be true of Docker”

This is precisely why I said the fact that someone would gloss over this is a red flag. The point is super critical . VMs are literally so hard to do correctly and in a performant fashion that parts of CPU instruction sets0, and kernel subsystems (KVM1) were created to make them easier to run. Containers, in contrast are literally a few flags and a bunch of in-kernel antics. A few people, notably Liz Rice and Jessie Frazelle have given talks on how to make containers from scratch that are very illuminating for those that are interested: link to this video link 0: link 1: link
View on Hacker News