tag
17 posts
A complete walkthrough getting Docker Desktop configured to use WSL2 as its backend, integrating specific distros, and verifying containers actually run using WSL2's real Linux kernel rather than a separate VM.
Docker Desktop configured to use the WSL2 backend suddenly can't see your distro, or containers fail to start with confusing errors. Here's how to work through the specific integration points that commonly break.
A complete walkthrough creating and running a lightweight systemd-nspawn container — useful for isolated testing environments without the overhead of a full container runtime.
How cgroup v2's unified hierarchy replaces v1's tangled controller mounts, and how to read and write limits directly through the filesystem.
A pod can't start because Kubernetes can't pull its container image — the fix depends entirely on which of a handful of specific causes is actually responsible, from a typo to a private registry auth problem.
How each of the Linux kernel's namespace types isolates a specific global resource, and why containers are just processes with a curated set of them.
Founded June 22, 2015 by Docker, CoreOS, and a broad industry coalition, the OCI set out to make container images and runtimes portable across tools and vendors rather than tied to any one implementation.
How the OCI runtime and image specs standardized what a 'container' actually is, and how containerd/CRI-O/runc fit together beneath Docker and Kubernetes.
How multi-stage builds, distroless base images, and layer discipline combine to produce smaller, more secure container images without sacrificing developer ergonomics.
How pod-to-pod networking, Services, and kube-proxy's packet rewriting fit together to make Kubernetes' flat network model actually work.
How vulnerability scanners actually inspect container image layers, how to read a scan report, and the practices that reduce real supply-chain risk.
The two-phase filter-and-score process the Kubernetes scheduler uses to decide which node a pod lands on, and how to influence it.
How Podman's daemon-less, fork-exec architecture differs from Docker's client-daemon model, and what that means for rootless containers in production.
At PyCon on March 15, 2013, dotCloud co-founder Solomon Hykes introduced Docker to the world, ahead of the company's later pivot to focus on it entirely.
On October 29, 2013, dotCloud announced it was scaling back its original PaaS business and renaming the company entirely around its container tooling.
A pod repeatedly crashes and restarts, sitting in CrashLoopBackOff. Here's a systematic way to find out why instead of just deleting and recreating the pod.
Docker builds and pulls start failing with ENOSPC, even though the host's regular disk usage doesn't look that high. Docker's own storage accumulates in places df alone won't clearly show you.