Containerization

Containerization is a lightweight form of virtualization that allows applications to run in isolated user-space environments while sharing the same host kernel. It provides resource isolation, portability, and consistent runtime environments. Key components include container engines, runtimes, kernel resource controls (cgroups), and system limits (ulimits).

📄️ Docker

Docker is a popular containerization platform that automates application deployment using containers.

📄️ Container Runtime

Container runtimes provide the low-level tools for running containers using OS primitives like namespaces and cgroups. Examples: containerd, CRI-O, runc. Docker uses containerd as its runtime.

📄️ Ulimits

ulimit controls resource limits for processes in a shell, including containers. It restricts CPU time, file descriptors, memory, etc., to prevent resource exhaustion.

📄️ cgroups (Control Groups)

cgroups provide fine-grained resource control for containers and processes, including CPU, memory, and I/O limits.