tag
19 posts
A practical model of ECS task definitions, services, capacity providers, networking, IAM, deployments, and the responsibilities AWS does not remove.
What Fargate manages, how task-level isolation and resource sizing work, and when its operational simplicity outweighs reduced host control.
Resolve Kubernetes ImagePullBackOff by classifying event errors, verifying immutable image identity, credentials, node networking, and runtime health.
The OCI launched in 2015 to standardize container images, runtime bundles, execution, and distribution across competing tools and vendors.
Creating and running a lightweight systemd-nspawn container — useful for isolated testing environments without a full container runtime's overhead.
Working through Docker Desktop's specific WSL2 integration points, from backend mode to per-distro toggles, when containers fail with confusing errors.
Configuring Docker Desktop to use WSL2 as its backend, integrating specific distros, and verifying containers run on WSL2's real kernel, not a separate VM.
How the OCI runtime and image specs standardized what a 'container' actually is, and how containerd/CRI-O/runc fit together beneath Docker and Kubernetes.
How Podman's daemon-less, fork-exec architecture differs from Docker's client-daemon model, and what that means for rootless containers in production.
Diagnose Kubernetes CrashLoopBackOff from events, previous logs, exit status, probes, configuration, and controlled debugging without erasing evidence.
Recover Docker disk space methodically by measuring images, containers, caches, volumes, and logs before pruning, then add safe recurrence controls.
How vulnerability scanners actually inspect container image layers, how to read a scan report, and the practices that reduce real supply-chain risk.
How pod-to-pod networking, Services, and kube-proxy's packet rewriting fit together to make Kubernetes' flat network model actually work.
The two-phase filter-and-score process the Kubernetes scheduler uses to decide which node a pod lands on, and how to influence it.
How multi-stage builds, distroless bases, secret-safe caching, non-root execution, and layer inspection produce smaller, auditable runtime images.
At PyCon on March 15, 2013, dotCloud co-founder Solomon Hykes introduced Docker to the world, ahead of the company's later pivot to focus on it entirely.
On October 29, 2013, dotCloud announced it was scaling back its original PaaS business and renaming the company entirely around its container tooling.
Understand cgroup v2 hierarchy, controller delegation, CPU, memory, I/O and PID controls, using safe systemd workflows and kernel evidence.
Understand Linux namespace types, ownership, lifetime and composition, then inspect containers without mistaking an isolated view for security.