Containers without Docker
summary
Explains that containers are just Linux processes and demonstrates exact plumbing — extracting image tars, using docker import to create an image, bootstrapping a 1.9 MB BusyBox rootfs, and performing rootless builds with alternatives to docker build. Walks through kernel primitives used: cgroups, namespaces, seccomp/AppArmor and capabilities, and shows swapping runtimes: containerd / CRI-O for Kubernetes via the CRI, plus runtime CLIs like Podman and VM-isolating runtimes (Kata/Clear) so images built to the OCI spec run without Docker.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:39Why Do We Need Docker At All
- 2:28Docker Has Evolved
- 4:22Docker Has a Demon
- 12:45What Is a Docker Image
- 14:39Docker Save
- 22:06Demo
- 27:57Environment Variables
- 30:16Namespaces
- 33:30Capabilities
- 36:09What Is a Container
- 43:33Getting Started
related talks
25mIntroduction to Bootable Containers
44mContainers in Depth – Understanding how containers work to better work with them
29mUnderstanding the Container Revolution
37mDeep Dive into Docker Containers for Rails Developers
23mLife of a Container
34mThe beauty of virtual infrastructure with K8s and containers
38mEverything you don't want to know about privileged containers
35mWhat Container Runtime Do I Need?