Containers Don't Exist - Your Kernel Is Lying to You

Containers vs VM - both give you isolation — so what's actually different? A container isn't a lightweight VM. This video breaks down exactly what happens when you run `docker run` and `docker exec`. You'll see namespaces, cgroups, and the `setns` syscall in action. We'll also cover why Docker on Mac is slower, why AWS Lambda uses Firecracker for multi-tenant isolation, and what CVE-2019-5736 proved about container security. **What you'll learn:** - How PID, mount, network, and user namespaces create isolation - What cgroups do for resource limiting - The reason Docker Desktop on Mac has slower volume mounts - How to create a container without Docker using `unshare` - What `docker exec` actually does under the hood Timestamps: 0:00 Cold Open 0:39 Virtual Machines 1:55 Containers 4:37 What Follows From This 6:47 Proving It More Videos : Software Egineering Basics - https://www.youtube.com/playlist?list=PLWP-VtjCVpWyLNBm3zz_sGyC5mVwiAOvj Software Design - https://www.youtube.com/playlist?list=PLWP-VtjCVpWx7kPq30XRN6O6LjVQ4VL95 #containers #docker #virtualization #devops #linux