Tag: containers

Build Docker images that run on amd64 and arm64 from one command. QEMU emulation, native multi-node builders, CI caching, and manifest lists explained.

cgroups v2 unified hierarchy explained: read /sys/fs/cgroup/, limit CPU/IO/memory, use systemd slices and PSI pressure files.

runc, crun, and youki all run your containers, but they differ wildly in startup speed, language, and cgroups v2 support. Here's which to pick.

Skopeo lets you copy, inspect, and sync container images between any registry without Docker. No daemon, no bloat, just clean image ops.

Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.

Kasm Workspaces streams disposable Linux desktops and apps to your browser. Threat model, real homelab uses, and how it compares to Guacamole.

Rootless Docker tuning deep-dive: network drivers, env vars, port drivers, cgroup delegation, and real troubleshooting, anchored to Docker Engine 29.x.

Containers are just namespaces and cgroups in a trench coat. Build one yourself with unshare and nsenter, no Docker required. Here's what actually happens.

HAOS Add-Ons vs bare Docker Compose for Mosquitto, ESPHome, Frigate, when the Supervisor magic is worth it and when it just gets in your way.

Rancher Desktop, Podman Desktop, and Docker Desktop go head-to-head on cost, k8s, resource use, and real-world friction for local dev.

PID 1 zombie reaping in containers, tini, dumb-init, and docker --init compared; when each one fixes your signal handling and stops your 10s shutdown tax.

Containers are not VMs. Here are the real escape vectors, privileged mode, mounted sockets, kernel CVEs, and the runtime hardening that actually helps.