Docker exec without Docker - Oliver Seitz
summary
Claim: you can replicate docker exec using only native Linux tools and it works. Uses unshare/nsenter to join mount, network, PID and user namespaces, manipulates cgroup v2 files (echoing PIDs into cgroup.procs), and shows a running nginx container where an interactive shell is opened without Docker. Demo sets a 10% CPU quota via cpu.max and a PID limit, explains virtual ethernet bridges for connectivity, and successfully inspects container files and serves HTTP.
AI-written summary · about
chapters (6)
- 0:00Introduction to containers
- 4:58Cgroups and namespaces
- 10:32Deep dive into cgroups
- 19:45Linux namespaces in action
- 30:14Building containers manually
- 35:53Q&A session
related talks
37mDocker without docker- understanding the basics
48mUnderstanding Container Engines by Demo™
39mContainers are Linux - but what does it mean?
01h 15mLinux containers in (less than) 100 lines of shell
33mLinux Container Internals
01h 32mContainers – A Look Under the Hood
23mLife of a Container
49mThings I Wish I Had Learned Earlier About Containers: Lessons from a Seasoned Linux...