Container Primitives

Control Groups

Abbreviated cgroups, is a Linux kernel feature that limits, accounts for, and isolates the resource usage

  • CPU
  • memory
  • disk I/O
  • network

Namespaces

A feature of the Linux kernel that isolate and virtualize system resources of a collection of processes. Examples of resources that can be virtualized include:

  • process IDs
  • hostnames
  • user IDs
  • network access
  • interprocess communication
  • filesystems