Small is beautiful when it comes to containers in test and dev environments: they take less time to build, use less memory, and have a smaller attack surface. We explore tools and provides instructions for building images that are a small as possible.
Scott van Kalken
Dive deep into two Linux features that underlie containers: namespaces and cgroups. They enable process isolation, ensuring that multiple processes running on a system don't interfere with one another. Our NGINX Unit application server also uses them for application isolation.