How containers are built and run with Docker, and how Kubernetes schedules, connects and heals them. Written for engineers who deploy and debug containerised apps.
You’re reading a free preview. Sign up to see every topic and question — and to play this deck as games.
What a container is at the level of the Linux kernel, how it differs from a virtual machine, and how images are stored in layers and shared through registries.
41 total questions
Card #1
Container
Card #2
Linux namespace
Card #3
cgroup (control group)
1. A Linux host runs one container from an Ubuntu image and another from an Alpine image. Which kernel does each container use?
2. A workload needs a different operating system kernel from the one the host runs. What is the right way to run it?
3. You pull myapp:latest on Monday and again on Friday and get two different images. Why?
1. gVisor adds isolation by handling a container's system calls in its own ___ that runs in user space, instead of passing them all to the host kernel.
Hint: The part of an OS that system calls normally go to
2. Kata Containers runs each container or pod inside a lightweight ___, so it gets its own kernel.
Hint: The other kind of isolation this topic compares containers with
3. cgroup version ___ uses a single unified hierarchy, and most current Linux distributions mount it by default.
Hint: The newer of the two versions
