Containers

Layered diagram of seven Linux namespaces surrounding a containerized process tree.

Inside Linux Namespaces: Unpacking the Kernel Primitives That Power Container Isolation

Containers look like lightweight VMs, but they’re really just processes wrapped in namespaces and cgroups. We unpack mount, PID, network, UTS, IPC, user, and cgroup namespaces, trace how runtimes like containerd wire them together, and explore the failure modes every SRE should know.

A diagram-style illustration of overlapping namespace rings, with a container shape in the center.

Inside Linux Namespaces: A Deep Dive into the Kernel Primitives Behind Modern Containers

Namespaces are the unsung kernel feature behind every container runtime. This post walks through the eight namespace types, how they appear in the kernel, and how Docker, Kubernetes, and runc compose them into the isolation boundary you trust in production.

Diagram of Linux namespaces and cgroups forming a container runtime.

Build a 300-Line Container Runtime in Go: A CV-Worthy Side Project

Build a working container runtime in roughly 300 lines of Go, using Linux namespaces and cgroups. A side project that signals real systems engineering chops on a CV.

Diagram of Linux cgroups hierarchy with resource limits.

Mastering Cgroups v2 Resource Isolation: Implementation, Architecture, and Performance for Production Systems

A deep dive into cgroups v2 resource isolation, covering architecture, real‑world configuration, and performance tuning for production systems.

Diagram of a Linux process tree with cgroup v2 hierarchy overlay.

Mastering Cgroups v2 Resource Isolation: A Deep Dive into Unified Hierarchy and Control Controllers

A practical guide for engineers to harness cgroups v2 for CPU, memory, I/O, and device isolation, featuring architecture diagrams and production‑ready configs.