[$] Containers as a recognized kernel object
The foundation of the design for containers in the kernel is that there isn't one; there is no container abstraction that the kernel recognizes. Instead, the kernel provides a long list of components — namespaces, control groups, sandboxing mechanisms, and more — along with a note that says, in effect, "some assembly required". There have been attempts ( repeatedly ) over the years to turn…
We haven't written up this one. LWN has the full story — the link below goes straight to it.
