Understanding Container Engines by Demo™
summary
Runs live demos using Docker and Podman plus runC and conmon to show exactly what happens between CLI and ps: engine creates an OCI config.json, mounts overlay layers and a bind mount, then conmon double‑forks and hands the config to runC which issues the clone syscall. Demonstrates that bind mounts have native speed vs overlay copy‑on‑write, that the copy-on-write layer survives kill until rm, and the security difference of rootless vs rootful usages and Docker-group granting effective root.
AI-written summary · about
chapters (4)
- 0:00Start
- 3:25The Discerning Container Connoisseur (DCC)
- 17:34The Story of Storage
- 21:37The Cagey Configuration File
related talks
33mLinux Container Internals
37mCRI-O: Under the Hood
49mThings I Wish I Had Learned Earlier About Containers: Lessons from a Seasoned Linux...
40mDocker exec without Docker - Oliver Seitz
23mWhat is a container, really? Let's write one in Go from scratch
34mPod Through a Magnifying Glass
26mExploring Container Mechanisms Through the Story of a Syscall
01h 32mContainers – A Look Under the Hood