NO ONE PUTS Java IN THE CONTAINER
summary
Containers use cgroups and namespaces so processes see the host kernel but not full isolation, and the JVM often misreads host resources: pre‑Java 9 reads total cores (so 10 JVMs × 32 cores = 320 apparent cores), Java 9+ respects CPU sets but memory still needs cgroup flags. Key specifics: Docker uses CPU shares vs CPU sets and CFS for limits, the freezer can pause a cgroup for safe orchestration, and enabling the cgroup memory limit JVM flag keeps heaps from being killed.
AI-written summary · about
chapters (7)
- 0:00Start
- 10:17Isolation
- 14:25Control Groups
- 22:08Namespaces
- 26:57Jre Default Initialization
- 33:07Conclusion
- 33:47Summarize Containers
