docker 底层技术说明

Docker is written in the Go programming language and takes advantage of several features of the Linux kernel to deliver its functionality. Docker uses a technology called namespaces to provide the isolated workspace called the container. When you run a container, Docker creates a set of namespaces for that container.

These namespaces provide a layer of isolation. Each aspect of a container runs in a separate namespace and its access is limited to that namespace.

Docker 使用Go 语言开发的，利用linux kernal 内核的一个优势。
Docker 使用namespace 技术隔离提供的隔离工作空间叫做容器。
运行一个容器时，docker 创建一系列的namespace。哪些namespace 提供了隔离层。每一个容器运行在各自的namespace，来限制别的容器访问。