Summary of the underlying implementation principle of docker

The underlying implementation of Docker is mainly based on LINUX technology, including Namespaces, Control groups, and Union file system on LINUX.


  1. Namespaces. Permission isolation control ensures that although they are on the same host, they are transparent to each other.
  2. control group. Resource allocation ensures the allocation and management of each container resource.
  3. Union file system. Mainly use cow technology (Copy on write) to improve disk utilization. Docker images, images can be inherited by layering. Supports mounting different directories to the same virtual file system. AUFS (Another UnionFS) used in Docker is a union file system. AUFS Supports setting readonly (readonly), readwrite (readwrite) and writeout (whiteout-able) permissions for each member directory (similar to Git branches)  AUFS . Branches can be logically modified incrementally (without affecting read-only sections).

Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=326121314&siteId=291194637