In this article, we describe how we successfully packaged our 10+ Spring Boot JARs into an all-in-one Docker image with minimal size, which were originally deployed on cloud Kubernetes instances.

This post will introduce how to analyse native and JVM memory on containers.

本文从应用侧调度软件开始介绍调度器，并主要以单机版OS为例，介绍了CGroups的隔离。

Namespace主要是通过CLONE_FLAG实现资源隔离。其实无论是Docker还是其它容器，它底层的隔离实现是内核早就有的功能。在内核中，通过ns_proxy实现。