Building Container Isolation From the Linux Kernel Up

Build container isolation from scratch with Linux namespaces and cgroups to understand the kernel features Docker uses.