Container Runtime Internals

Container Runtime Internals is a practical engineering guide to the Linux primitives that make containers work: namespaces, cgroups v2, seccomp, capabilities, and overlayfs. It covers the OCI specifications that standardize them, the low-level runtimes that implement them (runc, crun, youki), the middle layer that manages them (containerd, CRI-O), and the sandboxed alternatives that harden them (g...