bk99.de entertain the web since 1997

bk99.de
HN · ContainersCurated

Docker 1.0 makes containers production-ready

Summary

Docker releases version 1.0 and stabilises the image format, runtime, registry workflow and interfaces for portable Linux applications. Docker 1.0 was released in June 2014. The runtime used Linux namespaces and cgroups.

Ideas

  • Images bundle a file system and reproducible application layers.
  • Containers share the host kernel and isolate processes with namespaces.
  • Cgroups limit and measure resource consumption.
  • A registry distributes versioned images between environments.

Insights

  • Portability needs standardised artefacts and matching runtime assumptions.
  • A shared kernel saves resources and enlarges the shared trust base.
  • Immutable images make rollback and reproducible delivery easier.

Facts

  • Docker Hub provided a public registry.

Recommendations

  • Pin base images by immutable versions or digests.
  • Scan images and run containers without unnecessary privileges.

References

Read the original article

Search the Web Archive

HN · 2015

Docker basics in a hundred lines of Bash

Peter Wilmott recreates images, containers, networks and resource limits with shell commands and Linux kernel mechanisms. Bocker consists of about a hundred lines of Bash. The project requires Linux.

HN · 2025

Apple Container: Linux containers on macOS

Apple develops a Swift-based runtime that starts Linux containers in lightweight virtual machines on Apple Silicon. Apple publishes the project under the Apache 2.0 licence. The tool targets Apple Silicon Macs and uses Linux guest kernels.

HN · 2023

Go, containers and the Linux scheduler

River Phillips shows how unrecognised container CPU limits worsen Go garbage collection and application latency. The test container was given a quota of four CPUs. Adjusting GOMAXPROCS shortened the GC cycle from about 2.5 to under one millisecond.