Deep Dive into Docker Containers for Rails Developers
summary
Demonstrates container internals by actually creating namespaces with unshare + chroot demo, wiring veth pairs via ip, and showing cgroups in action: a Rails puma process is OOM killed at 40MB kill / 80MB works then runs when limits rise. Covers runtimes (Docker, rkt, systemd‑nspawn), kernel features (PID/mount/user/network namespaces, cgroups), security layers (user namespaces, AppArmor/SELinux, seccomp blocking ~44 syscalls) and orchestration needs with Kubernetes orchestration while warning databases in containers remain risky.
AI-written summary · about
chapters (5)
related talks
40mContainerizing Rails: Techniques, Pitfalls, & Best Practices
49mContainers without Docker
23mLife of a Container
43mServer Infrastructure for Rails in 2016
45mContainers from zero! An overview of cgroup and name-spaces
34mThe beauty of virtual infrastructure with K8s and containers
34mPod Through a Magnifying Glass
38mEverything you don't want to know about privileged containers