What Are Namespaces and cgroups, and How Do They Work? p.quote { margin-left: 20px; font-style: italic; } Recently, I have been investigating NGINX Unit, our open source multi-language application server. As part of my investigation, I noticed that Unit supports both namespaces and cgroups, which enables process isolation. In this blog, we’ll look at these two major Linux technologies, which also underlie containers. Containers and associated tools like Docker and Kubernetes have been around for some time now. They have helped to change how software is developed and delivered in modern application environments. Containers make it possible to quickly deploy and run each piece of software in its own segregated environment, without the need to build individual virtual machines (VMs). Most people probably give little thought to how containers work under the covers, but I think it’s important to understand the [ more… ]