General knowledge

( namespaces isolate what processes see (PID, filesystem, network), while cgroups control how much resources those processes can use. )


Docker

<aside> 💡

Docker makes lightweight containers - small, isolated environments that run apps. Containers share the host’s Linux kernel but have their own user-space (files, shells, processes).

</aside>