Reputation: 35905
There is a question How is Docker.io different from a normal virtual machine?, where an answer goes into details describing how lightweight Docker is and how isolated it is. I am trying to understand:
Upvotes: 1
Views: 313
Reputation: 38237
dotCloud did a series of articles talking about how containers build on OS namespaces and groups. They were called Under the Hood and while they were focused on the dotCloud PaaS, the general principles apply to all container systems.
So in the big picture, Docker processes are exactly regular OS processes. They just set some extra parameters (namespaces, cgroups, filesystem mounts) that are normally left to default values.
When you set these values to non-default parameters, you get additional isolation for your new process and more control over resources they use.
Upvotes: 2