Namespaces and Cgroups in Docker
As containers share the same kernel with the host, isolating and controlling the containers from the rest of the system becomes very important. Linux kernel does not have any specific code for the containers, these containers are implemented by multiple independent Linux kernel features like Namespaces, Cgroups, combined with filesystem tricks and enhanced with security …