Explore container kernel development with Christian Brauner from Canonical in this 51-minute Linux Foundation talk. Dive into topics such as reworking procfs, time namespaces, retrieving and injecting file descriptors into processes, efficiently closing multiple file descriptors, using pidfds for namespace management, and spawning containers directly into cgroups. Gain valuable insights into the intricacies of container technology and kernel-level optimizations for improved container management and performance.
Overview
Syllabus
Introducción
Reworking procfs
Time Namespaces
Retrieving File Descriptors From Processes
Injecting File Descriptors Into Processes
Closing multiple file descriptors at once
Using pidfds for namespace management
Spawning containers directly into cgroups
Taught by
Linux Foundation
Tags
Related Courses
-
Making Containers Safer - Security Features and New Developments
-
Cgroups, Namespaces, and Beyond - What Are Containers Made From?
-
Container Kernel Development
-
Syscall Supervision in User Namespaces and Unprivileged Containers
-
User Namespaces with Host-Isolated UIDs/GIDs - Linux Kernel Extension
-
Pod Through a Magnifying Glass - Understanding Kubernetes Containers
