Linux containers in (less than) 100 lines of shell
summary
Claims a usable Docker‑like container can be built with less than 100 lines of shell using only standard tools. Shows exact commands: unshare, mount/pivot_root, overlayfs for stacked root, BusyBox as the single binary userland, uid/gid maps for an inner root, and cgroups to cap CPU (demo sets ~50%). Delivers scripts that create rootfs, launch namespaces, run init as PID 1, and nearly runs a container‑in‑container.
AI-written summary · about
chapters (10)
- 0:00Linux containers in shell
- 1:14OverlayFS container filesystem
- 12:53Process isolation with namespaces
- 19:55Resource limits with cgroups
- 23:06Launch container with unshare
- 31:43Container init process
- 38:08Live container demo
- 52:14Superuser in container
- 1:06:34Nested containers demo
- 1:14:54Q&A
related talks
01h 32mContainers – A Look Under the Hood
39mContainers are Linux - but what does it mean?
33mLinux Container Internals
44mRootless containers
31mLet's Build And Break A Container By Hand Without Docker Or LXC
01h 31mTutorial: Using Linux Primitives to Build Your Own Containers
37mDocker without docker- understanding the basics
50mUnderstanding Linux Containers by Building One from Scratch