How Linux Containers Work: Cgroups, Namespaces and SELinux

HN recommends it as a talk that makes containers click, showing that containerization is not virtualization and demystifying what Docker does.

Jérôme Petazzoni explains how Linux containers are built from kernel features like cgroups, namespaces and SELinux. He demonstrates putting the pieces together by hand to make a container and compares runtimes and approaches like jails and zones.