HackerTubewatch
Surprise me
Frame from Cgroups, namespaces, and beyond: what are containers made from? Plays via YouTube's privacy-enhanced embed

Cgroups, namespaces, and beyond: what are containers made from?

Docker
Talks
YouTube
4 HN users recommended this talk3 months2017–2023 score 4
Years with an HN recommendation, 2007–2026

HN recommends it as a talk that makes containers click, showing that containerization is not virtualization and demystifying what Docker does.

Jérôme Petazzoni explains how Linux containers are built from kernel features like cgroups, namespaces and SELinux. He demonstrates putting the pieces together by hand to make a container and compares runtimes and approaches like jails and zones.

“I watched this talk couple of years ago that made docker/containers finally click for me.” (HN, 2017)

2 strong recommendations · 2 recommendations · 1 citations · Talks · intermediate

5 Hacker News comments

From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.

@dominotw Dec 2017 Strongly recommends
on HN thread Demystifying container runtimes
I watched this talk couple of years ago that made docker/containers finally click for me. Cgroups, namespaces, and beyond: what are containers made from? - Jérôme Petazzoni, [this video]
Made containers finally click
@dmpanch Jun 2023 Strongly recommends
on HN thread Build Your Own Docker with Linux Namespaces, Cgroups, and Chroot
This topic is perfectly covered in a presentation by Jérôme Petazzoni from Dockercon 2015, a Docker developer, on how containerization works. After watching the video, I began to clearly understand that this is not virtualization at all, as many at first imagine. [this video]
Clarifies containerization is not virtualization
@antoncohen Dec 2017 Recommends
on HN thread Ask HN: Good resources on learning how docker works under the hood?
Jérôme Petazzoni's talk on cgroups, namespaces, etc. I think he has given the talk a bunch of times, I saw it in person once, here is a video I found: [this video] He goes into cgroups, namespaces, etc. Then does a demo where is manually does what docker does, like untars an image, creates namespaces, creates the networking.
Talk with demo manually doing what Docker does
@hardwaresofton Apr 2018 Recommends
on HN thread A Workshop on Linux Containers: Rebuild Docker from Scratch
In the same vein: Building a container from scratch in Go (Liz Rice) @ Container Camp 2016 -> [link] What's a container really let's write one in go from sctach (Liz Rice) @ Golang UK Conference -> [link] Cgroups, Namespaces and beyond: What are containers made from (Jerome Petazzoni) @ DockerCon 2015 - [this video] Building Containers in Pure Bash and C (Jessica Frazelle) @ ContainerSummit 2016: [link] First two are basically the same talk, but it doesn't hurt to hear the same ideas more than once.
One of several talks on building containers

Citations, criticism and jokes

@Bayart Jan 2022 Cites it
on HN thread We're migrating many of our servers from Linux to FreeBSD
Read more
>There is controversy about Docker not running on FreeBSD but I believe (like many others) that FreeBSD has a more powerful tool. Jails are older and more mature - and by far - than any containerization solution on Linux. If FreeBSD jails and Solaris zones were equivalent to Linux containers, we'd have seen them take over the backend already. We haven't. They're really useful, they provided a degree of safety and peace of mind for multi-tenancy but they're not granular enough for what's done with $CONTAINER_RUNTIME these days. Jérôme Petazzoni has an old talk where he touches upon container primitives and compared them to jails : [this video]
Compares container primitives to jails

Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.

Keyboard shortcuts

/
Search
j k
Next / previous video
r
Surprise me
l
Like (video page)
w
Watch later (video page)
?
This help
Esc
Close