<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Docker on BrainBit Latest Articles</title><link>https://brainbit.uk/tags/docker/</link><description>Recent content in Docker on BrainBit Latest Articles</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Thu, 13 Jan 2022 00:00:00 +0000</lastBuildDate><atom:link href="https://brainbit.uk/tags/docker/index.xml" rel="self" type="application/rss+xml"/><item><title>So long dockershim</title><link>https://brainbit.uk/posts/containerd/</link><pubDate>Thu, 13 Jan 2022 00:00:00 +0000</pubDate><guid>https://brainbit.uk/posts/containerd/</guid><description>So long dockershim Hey as you know the latest versions of kubernetes have gotten rid of dockershim, so for example in GKE docker is not the default runtime anymore &amp;hellip; which is a bit of a pain in a way cause is kind of handy to ssh into gke node and:
docker exec --id 0 --privileged -it container bash Sometimes when contianers are run unprivielged and as non-root inside kubernetes , for example when you need to strace tcpdump etc.</description></item><item><title>Containers but not Docker</title><link>https://brainbit.uk/posts/containers-but-not-docker/</link><pubDate>Mon, 21 Nov 2016 20:47:08 +0000</pubDate><guid>https://brainbit.uk/posts/containers-but-not-docker/</guid><description>I’m not docker’s biggest fan , but i do see its benefits , although i think somehow it has managed to sort of hide what docker really is and what it really does, but this post isn’t about docker , but about namespaces.
Docker/lxc use a kernel feature that , in simplest terms , allows a process to have isolation a multiple levels (pids / fs / hostnames / etc)</description></item></channel></rss>