Part eight of the linux container series illustrates the purpose of two cgroup resource controllers: Network and Block I/O. The Network controller is used to control network sockets, while the Block controller is being utilized to enable I/O resource usage policies.
Control groups are another major building block of today’s Linux containers. The goal of cgroups is to enable fine-grained control over resources consumed by processes additionally to resource monitoring. This post of our container series informs about the basics regarding this kernel primitive.
Both LXC and Docker apply a standard namespace configuration in case no further configuration is supplied. This post describes the internals of namespaces in the Linux kernel. Also, practical use-cases for namespaces in terms of containerization are considered.