Konubinix' opinionated web of thoughts

Docker Engine 20.10

Fleeting

Introducing Docker Engine 20.10 - Docker Blog

Docker uses several foundational Linux kernel features to provide isolation to your running processes and the files associated with them

https://www.docker.com/blog/introducing-docker-engine-20-10/

Cgroups in Linux limits the resource usage (CPU, memory, disk, etc.) of a process.

https://www.docker.com/blog/introducing-docker-engine-20-10/

Docker combines these with the use of Linux namespaces to isolate your processes in containers

https://www.docker.com/blog/introducing-docker-engine-20-10/

has allowed Docker to graduate rootless from experimental to a fully supported feature.

https://www.docker.com/blog/introducing-docker-engine-20-10/