Docker & Linux Container Primitives
Technical essays and low-level architectural breakdowns exploring mechanical execution, system trade-offs, and engine internals.
Mastering Docker & Container Internals from First Principles: Series Introduction & Learning Roadmap
Discover what you will learn in this 20-part series on Docker Internals. Build a custom container engine and master Linux isolation primitives.
What Docker Adds on Top of Linux Kernel Isolation Primitives
Discover what Docker built on top of bare Linux namespaces, cgroups, and OverlayFS to create the modern container engine experience.
The Docker Toolchain Deep Dive: CLI to Daemon to containerd to runc
Explore the internal Docker process architecture: docker CLI, dockerd daemon, gRPC containerd, daemonless containerd-shim, and runc OCI container execution.
The Open Container Initiative (OCI): Image Specification and Runtime Specification
Master the Open Container Initiative (OCI) standards: Image Spec manifests, configuration JSON, layer diff tarballs, and the Runtime Spec filesystem bundle layout.
Building a Container From Scratch in Linux: unshare, chroot, pivot_root, and cgroups
Build a Linux container from scratch using unshare, pivot_root, mount namespaces, cgroups v2, and Alpine rootfs without Docker or runc.
Anatomy of a Docker Image: Layers, Config JSON, and Manifest Specifications
Explore the internal architecture of a Docker image: manifest lists, configuration JSON, tarball layer diffs, and whiteout file mechanics.
Dockerfile Instructions and Layer Mechanics: How Build Caching Works Under the Hood
Master Dockerfile build caching: cache invalidation cascades, COPY content checksums, instruction ordering optimization, and Exec vs Shell forms.
Multi-Stage Build Architectures & Minimal Base Image Optimization
Master multi-stage Docker builds: build stage pipelines, selective artifact copying, distroless vs Alpine vs scratch base images, and CVE reduction.