OpenShift Flashcards
define container
A process that runs in side a sandbox, isolated from processes outside the sandbox.
A way to package an application together with all it’s dependencies.
container engine
provides a set of tools for tasks such as creating container images and starting containers.
namespaces
create the sandbox that isolates a process. provide a segregated view of the host file system and network
control groups
enforce limits on process consumption of CPU slices, memory pages an i/o capacity
Linux capabilities
breaks up the privileges available to processes run as root.
Linux capabilities
breaks up the privileges available to processes run as root.
SecComp
Restricts user processes to certain system calls.