March SF Hadoop Users Meetup

Privilege Isolation in Docker Containers

Containers are a fundamentally different form of virtualization designed to directly virtualize applications. The absence of a guest OS layer makes containers extremely lightweight, with almost imperceptible runtime overhead. This talk covers privilege isolation techniques in Docker containers.