Docker and CI/CD · Senior · Question 1 of 75
Which kernel features do containers rely on for isolation and resource limits?
- 1Hardware virtualization extensions such as VT-x and AMD-V
- ✓Correct answer: Namespaces for isolation and cgroups for resource limits
- 3Separate kernels started for each container by Docker
Explanation
PID, network, mount, user and other namespaces give each container its own view; cgroups cap CPU, memory and I/O. There's no separate kernel, which is why kernel bugs matter.