Which kernel feature does docker isolation feature rely on?

#The kernel feature that the docker isolation feature relies on is Namespaces.

Docker relies on two kernel features of Linux:

Namespaces: Namespace

Control groups (cgroups): Control group

Namespaces

Namespace provides an isolation of system resources, including file systems, networks, processes, etc. Docker has 5 namespaces:

PID: Process Isolation

NET: Network Management Interface

IPC: Management of Cross-Process Communication Access

MNT: Management Mount point

UTS: Isolated kernel and version identification

Control groups

This is a method provided by the Linux kernel that can limit, record, and isolate The mechanism of physical process groups. He provides the following functions:

Resource Limitation

Priority Setting

Resource Metering

Resource Control

More related tutorials , please pay attention to the docker tutorial column of the PHP Chinese website.

The above is the detailed content of Which kernel feature does docker isolation feature rely on?. For more information, please follow other related articles on the PHP Chinese website!