This article explains the fundamentals of Docker container technology, covering the role of Linux namespaces for process isolation, control groups for resource limiting, and UnionFS-based image layering, while providing practical command examples and code snippets for creating and managing containers.
This guide explains Dockerfile fundamentals, walks through each core instruction with practical examples, demonstrates building images for simple CentOS containers, SpringBoot applications, and shows how to tag, push, and pull images from a registry, providing clear step‑by‑step commands and explanations.
This article introduces Loki, Grafana Labs' open‑source, horizontally scalable log aggregation system, compares it with ELK/EFK, explains its architecture and components, and provides step‑by‑step deployment instructions with Promtail configuration and Grafana integration for Kubernetes environments.
This tutorial explains how to configure Docker on a Kubernetes node to transparently use a remote Docker daemon by modifying the systemd service, creating a custom Docker image with helper scripts, and committing it, so users can run Docker commands without explicitly specifying the remote host.
An exposed Docker security flaw allows services bound to 127.0.0.1 via the -p flag to be accessed externally through iptables rules, as demonstrated by a PostgreSQL container proof‑of‑concept, and the article proposes stricter iptables configurations and default localhost binding to mitigate the risk.
The article explains how Nydus’s new RAFS v6 image format, built on the kernel‑native EROFS filesystem and integrated with fscache, overcomes the performance and scalability limitations of traditional OCIv1 and user‑space container image solutions by enabling kernel‑mode on‑demand loading, fine‑grained chunk deduplication, asynchronous prefetching, and superior I/O efficiency, with benchmark results demonstrating near‑native speeds.
This article explains what a Kubernetes pod is, why pods are needed instead of single containers, how the pause container enables shared namespaces, common pod deployment patterns, step‑by‑step creation with kubectl, and the detailed lifecycle and creation workflow of pods.
This article explains how to create a nested Kubernetes cluster (VMLC) inside a pod using SmartIDE, covering the motivations, required tools, Azure AKS setup, sysbox runtime installation, VMLC deployment, VS Code WebIDE and hybrid SSH access, building and deploying a Dapr sample, and clean‑up procedures.
Learn how to enable IntelliJ IDEA’s built‑in Docker plugin, configure remote Docker connections, manage images and containers, build custom Docker images from a SpringBoot project, and deploy the application using Docker Compose—all without leaving the IDE.
This article explains Linux signals, their role in Docker container shutdown, and demonstrates with Go and shell examples how using the exec form in Dockerfile ENTRYPOINT/CMD ensures containers receive termination signals for a clean exit.
The article examines the advantages and disadvantages of deploying container cloud platforms on bare‑metal servers versus virtual machines in the financial sector, covering performance, cost, management, security, workload suitability, and practical recommendations for banks based on their IaaS capabilities.
This guide introduces a versatile task‑scheduling panel supporting Python 3, JavaScript, Shell, and TypeScript, outlines its key features, and provides step‑by‑step deployment instructions for Podman, Docker, and Docker‑Compose, including command examples and usage tips.
This article provides an in‑depth comparison of Podman and Docker, covering their architectures, root‑less operation, security, integration with Kubernetes, support for Swarm/Compose, and practical guidance on when to choose or combine each container solution.
This article shares the author’s experience designing UC Browser’s next‑generation web container, examining its technical boundaries—such as complex media control, high‑performance long lists, parallax interactions, multi‑tab pages, and modal dialogs—and discusses when web, native, or Flutter solutions are most appropriate.
This article provides a comprehensive introduction to virtualization technologies, covering historical background, full and half virtualization, hardware‑assisted virtualization, KVM‑QEMU, GPU and I/O virtualization, and container solutions such as LXC and Docker, while highlighting their roles in modern cloud computing.
The article examines how rapid cloud‑native adoption reshapes application design and operations while introducing six distinct security risks, and proposes a comprehensive DevSecOps framework that integrates early‑stage security controls across infrastructure, compute, development, and management to protect modern containerized environments.
This tutorial walks readers through the evolution of web deployment, explains core Kubernetes concepts, and provides step‑by‑step instructions for using kubectl to create Ingress, Service, and Deployment resources that run a multi‑instance Node.js backend, culminating in a functional K8S deployment workflow.
This article introduces several Docker alternatives—including Podman, ZeroVM, OpenVZ, Rancher, Containerd, VirtualBox, RunC, Buildah, and Kubernetes—explaining their key features, security benefits, and typical use cases for developers and administrators seeking non‑Docker container solutions.
This article chronicles the evolution of cloud‑native container technology—from early IaaS and PaaS concepts, through Docker’s rise, Kubernetes’s dominance, to modern serverless offerings like Alibaba Cloud’s ECI and ASK—highlighting how managed services simplify operations and enable rapid, pod‑level scaling.
This article provides a comprehensive overview of Flutter's container‑type widgets—including Padding, DecoratedBox, Transform, Container, and Scaffold—explaining their differences from layout widgets, demonstrating their APIs, and showing practical code examples for UI composition and styling.
This article explains the fundamental differences between Vagrant and Docker, compares virtual machines and containers across isolation, resource usage, startup time and image size, and outlines when to choose Vagrant for VM management versus Docker for rapid application development and deployment.
This article explores the evolution of virtualization technologies, detailing the principles and differences of full and para-virtualization, hardware‑assisted solutions like Intel VT/AMD‑V, and the rise of containerization with LXC and Docker, while illustrating key architectures such as VMware, Xen, KVM‑QEMU, and GPU virtualization.
This article reviews seven Docker alternatives—Podman, LXD, containerd, Buildah, BuildKit, Kaniko, and RunC—detailing their architectures, key differences, security models, and typical use cases for developers and DevOps teams seeking flexible, daemon‑less or Kubernetes‑friendly container solutions.
This article explains Linux processes and threads, their relationship, key kernel parameters like ulimit, threads‑max, and pid_max, and how to limit thread and PID usage in containers using cgroups, Docker, and Kubernetes to prevent resource exhaustion.
This guide walks you through installing Docker Desktop on Windows 10 using WSL2, handling common startup errors, migrating Docker image storage to another drive, and configuring domestic image accelerators to improve pull speeds, all with step‑by‑step commands and screenshots.
This article provides a comprehensive overview of Podman, explaining its architecture, key differences from Docker, common commands, installation steps, configuration details, and practical usage examples for managing containers, images, volumes, and rootless operation on Linux systems.
This article explains Linux signals, the difference between exec and shell forms of Dockerfile ENTRYPOINT and CMD, and demonstrates with Go and shell script examples how to configure containers so that docker stop sends SIGTERM correctly for a clean shutdown instead of a forced kill.
This article explores common pitfalls when using Flutter’s Container widget, explains the underlying layout rules and constraint system, and walks through six practical scenarios with source‑code analysis to reveal why width, height, alignment, and constraints behave the way they do.
This article walks through Docker's built‑in network drivers—including bridge, host, none, overlay, macvlan and plugins—then dives into Kubernetes networking, detailing Pod communication, the Flannel CNI workflow, and how data traverses virtual bridges and physical interfaces.
This article explains the role of Linux cgroup and namespace technologies in providing resource isolation and security for containers, traces their historical development from early chroot mechanisms to modern Docker and Kubernetes, and details cgroup architecture, core files, migration, delegation, and practical usage examples.
This guide explains how to format and optimize Dockerfile instructions, choose minimal base images, avoid root users, manage processes, clean caches, and apply best‑practice tips such as proper ENTRYPOINT scripts and labeling to create smaller, more secure container images.
This article explains Linux signals, the difference between exec and shell forms of Dockerfile ENTRYPOINT and CMD, and demonstrates with Go and shell‑script examples how to configure containers so that docker stop sends SIGTERM and allows applications to exit cleanly.
This guide demonstrates how to create a Docker image for Apache Tomcat on CentOS by preparing a Dockerfile that installs JDK, adds Tomcat binaries, sets an ENTRYPOINT to start the server, and exposes port 8080 for containerized deployment.
This tutorial demonstrates how to create a Dockerfile on a CentOS host, build an Nginx image, run the container, and verify its operation, while highlighting the importance of specifying an entrypoint or CMD in the Dockerfile.
This article explains Docker's ADD instruction, covering its syntax, automatic archive extraction, advantages and disadvantages, detailed usage rules for files and directories, and provides a concrete Dockerfile example with build and run commands.
This article provides a comprehensive overview of microservices architecture, explaining its definition, core principles such as small independent services, process isolation, lightweight communication, independent deployment and management, while also discussing advantages, drawbacks, suitable organizations, service discovery, gateway, configuration center, monitoring, containerization, orchestration and related tooling.
The article explains how open‑source software, driven by effective business models and community governance, has become the foundation of cloud‑native technologies like Kubernetes, illustrating why this model thrives and how companies such as Lingque Cloud contribute to its healthy evolution.
This article provides a broad, non‑technical overview of Docker’s evolution, the diverse container technologies that preceded it, key Docker concepts and components, the Moby project, and the rise of orchestration tools, illustrating how containers have become mainstream from 2013 to 2017.
This guide walks through every Dockerfile instruction—from variables and FROM to ENTRYPOINT and HEALTHCHECK—explaining syntax, usage tips, and common pitfalls, so you can build efficient, reproducible container images with confidence.
OverlayFS is a stacking file system that merges lower and upper directories into a single view using mount options like lowerdir, upperdir, and workdir, supports copy‑up, whiteouts, opaque directories and configurable rename handling, and is employed in Android, OpenWRT, and container platforms to provide writable overlays on read‑only layers.
This guide explains how to migrate Docker images by using the docker load/save commands for image‑level import/export and the docker import/export commands for container‑level import/export, detailing each command's options and providing concrete examples.
This article provides a comprehensive overview of the Cloud Native Computing Foundation (CNCF), its origins, definition of cloud‑native, the full technology stack, member organizations, key historical milestones, 2019 survey statistics, and a technical comparison between the SpringCloud + CloudFoundry and container + Kubernetes ecosystems.
A recent incident revealed that a misconfigured kubelet and missing firewall rules allowed an attacker to hijack a node in a self‑built Kubernetes cluster for Monero mining, prompting a detailed post‑mortem and a set of hardening recommendations.
This article explains the challenges of uncontrolled page‑cache growth in containerized workloads, reviews community attempts to limit it, and details TencentOS “Ruyi” memory‑QoS solutions—including cgroup‑level page‑cache limits, implementation details, and observed performance effects.
Docker is a lightweight, open‑source container platform that packages applications and their dependencies into portable images, offering faster startup, lower resource consumption, and easier migration compared to traditional virtual machines, while providing isolation, standardization, and security for modern cloud‑native deployments.
This article provides a comprehensive, step‑by‑step explanation of every Dockerfile instruction—including variables, FROM, RUN, CMD, LABEL, EXPOSE, ENV, ARG, ADD, COPY, ENTRYPOINT, VOLUME, STOPSIGNAL, HEALTHCHECK, SHELL, WORKDIR, and USER—along with syntax details, usage tips, and practical code examples for building efficient container images.
This guide walks through installing Docker on CentOS 7, pulling the official Jenkins image, creating a host volume, running the container with proper port and volume mappings, retrieving the initial admin password, and completing the Jenkins setup with recommended plugins.
The article examines Docker’s shift to paid subscriptions, its missed partnership with Kubernetes, internal management conflicts, and how these strategic missteps have reshaped its role in the cloud‑native ecosystem, while exploring the future prospects under new leadership.
This article explains TencentOS “Ruyi” network QoS, detailing its resource isolation concepts, tc+htb and cgroup configurations, performance testing, and the advantages of the Ruyi netqos scheme over traditional tc solutions for mixed online and offline container workloads.
In a September 9 live session, Michael Yuan explained how WebAssembly serves as a high‑performance execution environment for Dapr, demonstrated building Go and Rust sidecars with WasmEdge, and answered audience questions about Docker replacement, real‑world adoption, memory management, isolation, and serverless use cases.
This article provides a comprehensive technical guide to Apache Tomcat, covering its servlet container architecture, core components such as Server, Service, Engine, Host, and Context, lifecycle management, request processing pipeline, connector types, JSP handling, asynchronous servlet support, and related code examples.
This tutorial walks through the fundamentals of Linux bridge devices, showing how to create a bridge with iproute2, connect it to veth pairs, assign IP addresses, attach a physical NIC, and apply the setup in virtual‑machine and Docker environments while explaining common pitfalls and networking behavior.
Docker announced a subscription‑based Business edition of Docker Desktop, outlining its enterprise‑focused features, pricing, the continued free Personal tier, and a detailed look at the platform’s architecture, workflow, and the company’s turbulent growth and two perceived “deaths.”
This article explains the differences between hardware and system clocks, how Linux manages time zones, why container images often have incorrect default time zones, and provides multiple practical methods—including Dockerfile settings, volume mounts, environment variables, PodPreset, and libfaketime—to correctly set or adjust time in Docker and Kubernetes environments.
This article explains the recent US export restrictions on Docker, highlights the need for open‑source replacements, and provides detailed overviews of ten prominent Docker alternatives—including Podman, LXC, RKT, OpenVZ, Rancher, Nanobox, Singularity, Kubernetes, OpenShift, and Apache Mesos—covering their key capabilities, security aspects, and platform support.
This guide introduces two handy Docker utilities—runlike for instantly printing a container's original run command and whaler for extracting a Dockerfile from an image—detailing installation via pip or Docker, usage examples, alias setup, and practical output considerations.
This guide walks through installing Docker on CentOS 7, launching Portainer with a single Docker command, accessing its web UI on port 9000, setting an admin password, and using the interface to view and manage images and containers.
This guide walks through installing Docker CE on a CentOS 7 system, covering prerequisite kernel checks, repository configuration, package installation, verification with hello‑world, common troubleshooting, and clean removal steps, while explaining core Docker concepts such as images, containers, and registries.
This guide provides a comprehensive collection of Docker commands for inspecting Docker versions, handling images (listing, searching, pulling, deleting, building), and managing containers (starting, stopping, logging, attaching, executing, committing, and copying files), offering a practical reference for developers and operations engineers.
This article explains how to build a custom serverless runtime and a custom container runtime on Alibaba Cloud Function Compute, covering the background of FaaS, the concept of custom runtimes, step‑by‑step development using TypeScript, Docker, and deployment with the Fun tool.
This article explains heterogeneous Docker image builds, demonstrates how to name and reference multi‑stage build stages for clearer Dockerfiles, shows how to limit builds with the target flag for debugging, and illustrates copying files from existing images such as nginx to streamline container creation.
This guide explains how to launch a private Docker registry on localhost, push a BusyBox image to it, remove the local copies, and then pull the image back from the registry, demonstrating the full push‑pull workflow with Docker commands.
This article explains how Docker volumes work, how to mount host directories into containers using the -v and --mount options, and demonstrates data persistence by creating a volume, inspecting its storage location, and verifying that files created inside the container appear on the host.
This article explains the advantages of using Dockerfiles for image building, outlines key principles such as single responsibility, commenting, minimalism, proper base image selection, .dockerignore usage, cache optimization, and timezone configuration, and provides a practical example Dockerfile to improve build speed and image size.
This article explains how to use FUSE‑based s3fs to mount an Amazon S3 bucket as a regular filesystem inside Kubernetes pods via a DaemonSet, covering background, FUSE principles, implementation steps, Docker image creation, ConfigMap and DaemonSet configuration, and performance trade‑offs.
The article explains how Google and Facebook’s monolithic repositories and unified build systems let them avoid Docker images by using direct module transfer, tarballs, XAR files, and overlay filesystems, while highlighting the technical trade‑offs and challenges of layered caching in large‑scale clusters.
This tutorial explains how to enable Docker BuildKit and apply a series of Dockerfile optimizations—including reordering commands, using multi‑stage builds, minimizing base images, and leveraging cache and secret mounts—to significantly reduce build time and image size while improving maintainability and security.
This article outlines key Kubernetes best practices for production environments, covering health probes, resource management, RBAC, cluster configuration, networking policies, monitoring, stateless design, autoscaling, runtime resource control, continuous learning, priority handling, zero‑downtime strategies, and failure planning to ensure secure, scalable, and highly available deployments.
At an April 10 technical salon, iQIYI’s Zhao Wei detailed the company’s shift from Mesos‑Marathon to Kubernetes, describing container application scenarios, evolving network stacks from bridge/NAT to Cilium/BGP, the adoption of Containerd with RunC and optional Kata runtimes, performance trade‑offs, and a hybrid scheduling approach that improves resource utilization across offline and online services.
This article provides a comprehensive overview of Docker’s overall architecture and detailed analysis of its core components—including client, daemon, engine, registry, graph database, drivers, and libcontainer—explaining how they interact to manage containers, images, networking, and execution within a cloud‑native environment.
This guide compiles seventeen common Docker problems—including storage directory migration, disk space shortages, missing libraries, container corruption, network misconfigurations, and command‑line quirks—along with step‑by‑step solutions, configuration tweaks, and command examples to help engineers quickly diagnose and resolve container issues.
This article provides a comprehensive, step‑by‑step analysis of Docker's client‑server architecture, the Docker Engine API for image building, the internal workings of the Docker CLI, the differences between the legacy builder and BuildKit, and how the dockerd daemon processes build requests, complete with code excerpts and diagrams.
This guide explains how to create a Dockerfile for a Java JAR, describes the purpose of each Docker instruction, shows how to build the image, run the container with proper ports and volumes, and view container logs.
This article provides an extensive overview of the most popular Docker‑related tools—including orchestration, CI/CD, monitoring, logging, security, storage, networking, service discovery, image building, and management solutions—detailing their core features, official websites, pricing models, and typical use cases for developers and operations engineers.
The article outlines how video container formats such as AVI, MOV, MP4, WMV, RM, FLV and MKV package encoded streams, then explains H.264 encoding fundamentals—including I‑, P‑, B‑frames, macroblocks, GOP structure, and NAL units like SPS and PPS that define parameters for efficient compression and transport.
While Docker once dominated container workflows, a growing ecosystem of tools—such as Podman, Buildah, Kaniko, BuildKit, and various runtimes—offers daemon‑less, root‑less, OCI‑compatible alternatives for building, running, and distributing images, and this guide compares their features, commands, and use cases.
This article explains Docker’s built‑in network drivers—including bridge, host, none, overlay, macvlan and plugins—detailing their setup and external access, then explores Kubernetes networking challenges and how Flannel implements pod‑to‑pod communication through virtual interfaces, routing, and encapsulation.
This tutorial introduces Docker, walks through installing it on CentOS, demonstrates pulling a Java image, creating a Spring Boot project with Docker Maven plugin, building and running the container, and shows how to view container and Log4j2 logs.
This article explains how Docker's multistage build feature, introduced in version 17.05, enables faster image creation and significantly smaller container sizes by separating build steps into distinct stages within a single Dockerfile, and shows how to target specific stages during the build process.
This whitepaper provides a detailed, end‑to‑end framework for organizations and technical leaders to understand, implement, and continuously improve security across the cloud‑native lifecycle—covering development, release, deployment, runtime, supply‑chain protection, zero‑trust architecture, and compliance—while emphasizing automation, observability, and cross‑functional collaboration.
This tutorial walks you through turning a Java cloud‑gaming demo into a Docker image, publishing it to Uhub, and running it on Cube, covering Docker basics, environment setup, Dockerfile creation, image build and push, and next steps for CI/CD integration.
This article traces the six‑year evolution of Serverless from its 2012 concept to modern cloud‑native products, explains its definition, explores the rebirth of PaaS, examines Function Compute, container‑based Serverless, BaaS, and how these technologies complement microservices and accelerate digital transformation.
Discover eleven easy-to-use Docker projects, each with a brief description, GitHub link, and popularity metrics, that help newcomers quickly practice containerization, explore real-world use cases, and deepen their understanding of Docker's capabilities across development and operations.
This article provides a comprehensive overview of Docker's architecture, detailing the client‑server model, the roles of Docker Daemon, Engine, Registry, various drivers, Libcontainer, and how containers are created, managed, and delivered within a cloud‑native environment.
This article explains how to run Podman on macOS by installing HyperKit, creating a lightweight Ubuntu VM, configuring Podman's remote API socket, and connecting the local CLI via SSH, providing a more resource‑efficient alternative to Docker Desktop.
This article provides a comprehensive walkthrough of ThinkPHP's routing system, explaining why routes are used, how the route initialization process works, how annotation routes and facades are resolved, and detailing the preprocessing of route rules, variable handling, and container‑based dependency injection.
Nydus, an open‑source container image acceleration service built on Dragonfly, dramatically reduces image download time, enables on‑demand image loading, provides block‑level deduplication and end‑to‑end data integrity verification, and integrates seamlessly with OCI standards and cloud‑native ecosystems.
The article introduces Nydus, an open‑source container image acceleration service co‑developed by Ant Group and Alibaba Cloud, explaining its architecture, on‑demand download, data deduplication, end‑to‑end consistency, OCI compatibility, and how it speeds up container startup while enhancing security.
This article provides a comprehensive guide to Docker, covering image concepts, UnionFS layering, image creation and loading principles, data volume usage, Dockerfile commands, building custom images, pushing to Alibaba Cloud, and deploying SpringBoot applications in containers.
This article traces the evolution of container technology from early OS virtualization concepts in the 1970s through the rise of Docker, Kubernetes, and CNCF standards, outlining four distinct development phases, resource‑isolation techniques, commercial service models, and future trends shaping the cloud‑native ecosystem.
This article explains Docker images as lightweight, executable software packages, describes the UnionFS layering mechanism, outlines image characteristics, shows how to commit images, use container volumes (including named, anonymous, and bind mounts), and provides step‑by‑step Dockerfile examples for building custom CentOS, Tomcat, and SpringBoot images as well as uploading images to Alibaba Cloud.
This article explains how to design and implement a Docker container monitoring system using CAdvisor for metric collection, InfluxDB for time‑series storage, and Grafana for visualization, covering deployment, integration, common issues, and practical configuration details.
Depending on network constraints like corporate NAT, Docker may require proxy settings; this guide explains three proxy scenarios—daemon (dockerd) via systemd, container-level via config.json, and build-time via build arguments—detailing the necessary environment variables, configuration files, and command-line options for Linux environments.
This guide explains why Java 11 is worth adopting, lists its major language and API enhancements over Java 8—including var type inference, improved collections, stream and HTTP client APIs—and provides detailed solutions for common migration issues such as missing JAXB modules and container‑aware JVM behavior.
This guide explains how to set up HTTP/HTTPS proxy environment variables for the Docker daemon via systemd, configure per‑container proxy settings through the Docker client config.json, and pass proxy arguments during docker build, including special considerations for network isolation and host mode.
This guide explains how to configure HTTP/HTTPS proxies for Docker's daemon via systemd, set per‑container proxy settings through the Docker config file, and pass proxy arguments during image builds, covering common pitfalls and network isolation considerations.
This article explains how cloud‑native principles—combining agile, DevOps, CI/CD, microservices, service governance, container technology, and cloud computing—address modern application challenges such as rapid deployment, elastic scaling, fault detection, self‑healing, and alignment with organizational structures.
This guide explains Docker's two log types, how to locate engine logs on various Linux distributions, how to use the docker logs command, and provides detailed configuration examples for each Docker log driver—including local, json‑file, syslog, and journald—plus strategies for handling file‑based container logs in production environments.
The article presents JDFlutter, a comprehensive Flutter‑based solution that unifies container, dynamic updates, module injection, Flutter‑to‑Web conversion, iOS size reduction, hybrid development, multi‑team workflows, and a Pub repository, aiming to streamline cross‑platform mobile development and improve efficiency at JD.com.
This article explains the design and implementation of a hybrid Flutter container for native Android and iOS apps, covering concept overview, solution comparison, container stack management, navigation handling, iOS gesture support, multi‑container strategies, routing protocols, and practical code examples.
