Search⌘ K
AI Features
Home
Courses
Docker Deep Dive: Advanced Techniques

Linux Security Technologies

Explore how Linux kernel namespaces enable container isolation within Docker. Understand each namespace type and its role in securing containers, along with Docker’s use of supplementary technologies for enhanced protection.

We'll cover the following...

Kernel namespaces

Kernel namespaces, usually shortened to namespaces, are the main technology for building containers. Let’s quickly compare namespaces and containers with hypervisors and virtual machines (VM).

Namespaces virtualize operating system constructs such as process trees and filesystems, whereas hypervisors virtualize physical resources such as CPUs and disks. In the VM model, hypervisors create virtual machines by grouping virtual CPUs, virtual disks, and virtual network cards so that every VM looks, smells, and ...