No More Re-execs: Speeding Up Docker Container Startup Using Runtime LockOSThread

Explore a 16-minute technical talk that delves into the challenges and solutions surrounding Linux container implementation in Go programming. Learn about the critical role of the unshare system call in Linux containers and understand the compatibility issues between Go runtime and system calls like unshare and setns. Discover how Docker and ContainerD have evolved from using workarounds to implementing modern solutions for these technical challenges. Speaker Cory Snider presents a detailed examination of container startup optimization, focusing on the implementation of runtime LockOSThread to enhance performance and efficiency in container deployment.