Building a Container Runtime from Scratch

Containers often feel like magic: run a command, and suddenly your application is isolated from the rest of the system. But what is actually happening underneath?

In this talk, we’ll peel back the layers of container abstractions and build a simple container runtime from scratch using Go. Along the way, we’ll explore the Linux primitives that make containers possible, including namespaces for isolation and cgroups for resource management. Through live code and practical demonstrations, attendees will see how Go can interact directly with these operating-system features to create an isolated environment for running processes.

By the end, Docker and other container technologies should feel a little less like magic and a lot more like understandable Linux primitives assembled together.