Linux namespaces and chroot are two of the main constructs that are used to run the containers. These are the two constructs that actually enabled us to run containers.
In this videos we set up basic understanding of Linux namespaces that we have convered in one of the previous videos and then looked into chroot in more details with example to figure out how we can use it to limit a process' view of the system.
Finally we used Linux namespaces and chroot together to actually show how we isolate a process and limit it's view of host filesystem.
Container from scratch blog post:
ericchiang.github.io/post/con...
Documentation:
man7.org/linux/man-pages/man1...
Web:
viveksingh.dev/
00:00 Introduction
00:31 Agenda
01:06 Background on Linux Namespaces
05:10 What is chroot
07:38 Limiting a process' view of the system
10:33 Why do we use `FROM` in `Dockerfile`
13:19 Looking into a process with actual rootfs
17:18 Namespaces with chroot
21:15 Summary
21:41 Like and Subscribe
25 июн 2024
