BestHub
Sign in
Tagged articles
46 articles
Page 1 of 1
MaGe Linux Operations
MaGe Linux Operations
May 16, 2026 · Cloud Native

Why Pods Are the Most Powerful Unit in Kubernetes – A Deep Dive

This article provides a comprehensive, step‑by‑step analysis of Kubernetes Pods, covering their design as a shared‑namespace container group, the role of the pause (infra) container, creation flow, lifecycle phases, resource requests and limits, QoS classes, scheduling mechanics, volume types, and detailed troubleshooting techniques with concrete command‑line examples.

KubernetesNamespacePod
0 likes · 30 min read
Why Pods Are the Most Powerful Unit in Kubernetes – A Deep Dive
Cloud Native Technology Community
Cloud Native Technology Community
Oct 30, 2025 · Cloud Native

Master Kubernetes Namespaces: Isolation, Best Practices & Lifecycle Management

This article explains why Kubernetes namespaces are essential for logical isolation, outlines their core functions such as resource naming separation, RBAC scopes, quota limits and network policies, and provides practical commands, YAML examples, troubleshooting tips, and automation strategies for managing namespaces at scale.

Cloud NativeKubernetesNamespace
0 likes · 8 min read
Master Kubernetes Namespaces: Isolation, Best Practices & Lifecycle Management
Code Mala Tang
Code Mala Tang
Oct 1, 2025 · Fundamentals

Master Python’s LEGB Rule: Scope Secrets for Faster, Safer Code

This article explains Python’s LEGB rule—Local, Enclosing, Global, Built‑in scopes—detailing each namespace with clear code examples, demonstrating name resolution order, performance impacts, and practical best‑practice tips such as minimizing globals, using nested scopes, and avoiding built‑in overrides.

LEGBNamespacebest practices
0 likes · 12 min read
Master Python’s LEGB Rule: Scope Secrets for Faster, Safer Code
Raymond Ops
Raymond Ops
May 31, 2025 · Operations

Master Docker Container Management: Run, Stop, Resource Limits & Best Practices

This guide walks through Docker container fundamentals, covering how to run containers with CMD or ENTRYPOINT, keep them alive, attach or exec into them, stop/start/restart, pause/unpause, remove, apply memory, CPU and block I/O limits, and explains the underlying cgroup and namespace technologies that enforce isolation and resource control.

Container ManagementDockerNamespace
0 likes · 18 min read
Master Docker Container Management: Run, Stop, Resource Limits & Best Practices
Code Mala Tang
Code Mala Tang
Jan 7, 2025 · Fundamentals

Master Python Imports: Choose import, from, or * and Avoid Common Pitfalls

This guide explains the differences between Python's import statements—including "import X", "from X import Y", and "from X import *"—covers dynamic imports with __import__, sys.path handling, PYTHONPATH, PEP8 import ordering, __all__ usage, and the role of __name__ in module execution, helping you write cleaner, conflict‑free code.

ModulesNamespacedynamic import
0 likes · 10 min read
Master Python Imports: Choose import, from, or * and Avoid Common Pitfalls
Infra Learning Club
Infra Learning Club
Jan 4, 2025 · Cloud Native

How GPU Devices Are Dynamically Mounted to Kubernetes Pods

This article dissects the GPUMounter project's implementation of dynamic GPU device mounting to a pod, detailing the roles of cgroups (v1 and v2) and Linux namespaces, and provides step‑by‑step command‑line examples and a CLI tool for practical use.

GPUKubernetesNamespace
0 likes · 13 min read
How GPU Devices Are Dynamically Mounted to Kubernetes Pods
Liangxu Linux
Liangxu Linux
Aug 4, 2024 · Fundamentals

How Linux Process Creation Powers Containers: From fork to Namespaces

This article explains how Linux creates processes using fork, vfork, clone and pthread_create, reveals the role of the init process, explores clone flags and namespace checks in the kernel, and shows why understanding these fundamentals demystifies container startup.

ContainerLinuxNamespace
0 likes · 7 min read
How Linux Process Creation Powers Containers: From fork to Namespaces
Open Source Linux
Open Source Linux
Jul 3, 2024 · Cloud Native

How Docker Uses PID Namespaces to Isolate Containers: A Deep Dive

This article explains Docker’s core isolation mechanisms, focusing on how Cgroups and PID namespaces create separate process spaces, demonstrating with Ubuntu container commands, and clarifying why each container sees its own PID 1 despite the host’s actual process IDs.

DockerLinuxNamespace
0 likes · 6 min read
How Docker Uses PID Namespaces to Isolate Containers: A Deep Dive
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Apr 19, 2024 · Cloud Native

Understanding Docker: Architecture, Core Components, and Underlying Mechanisms

This article explains Docker’s core architecture—including images, containers, and registries—and details how Linux namespaces, cgroups, and UnionFS work together to provide resource isolation, limitation, and lightweight virtualization, while also offering promotional links to extensive architecture and interview collections.

Cloud NativeContainersDocker
0 likes · 6 min read
Understanding Docker: Architecture, Core Components, and Underlying Mechanisms
Liangxu Linux
Liangxu Linux
Jan 13, 2024 · Cloud Native

Essential Docker Commands and Architecture: From Basics to Containers

This guide explains Docker's core architecture, lists the most frequently used Docker commands, compares containers with traditional virtual machines, and dives into the underlying Linux technologies—namespaces, cgroups, and union file systems—that make containerization possible.

ContainerDockerNamespace
0 likes · 12 min read
Essential Docker Commands and Architecture: From Basics to Containers
Top Architect
Top Architect
Nov 28, 2022 · Cloud Native

Docker Container Networking: Modes, Configuration, and Practical Commands

This article explains Docker's built‑in container networking, describing the three default networks, the four network modes (bridge, container, host, none), how to inspect and configure them with commands, use veth pairs and network namespaces, and perform common container operations such as port mapping and custom bridge creation.

ContainerDockerNamespace
0 likes · 27 min read
Docker Container Networking: Modes, Configuration, and Practical Commands
Liangxu Linux
Liangxu Linux
Oct 7, 2022 · Cloud Native

How Docker Leverages chroot, Namespaces, and Cgroups for Secure Containers

A whimsical tale explains how Docker solves application deployment pain by using chroot/pivot_root for filesystem isolation, Linux namespaces to hide host resources, and cgroups to limit CPU, memory, and I/O, illustrating core container technologies with practical code snippets.

ContainersDockerLinux
0 likes · 8 min read
How Docker Leverages chroot, Namespaces, and Cgroups for Secure Containers
Baidu Geek Talk
Baidu Geek Talk
Sep 29, 2022 · Databases

Design and Challenges of TafDB: A Scalable Metadata Storage Engine for Cloud Data Lakes

TafDB, Baidu’s Spanner‑like distributed transaction database built on RocksDB and Multi‑Raft, provides a virtually unlimited metadata layer for cloud data lakes by unifying hierarchical and flat namespaces, minimizing cross‑shard transaction overhead, handling garbage collection, and employing a distributed clock, thus delivering trillion‑scale metadata capacity and tens of millions of QPS with low latency.

NamespaceScalabilityTafDB
0 likes · 21 min read
Design and Challenges of TafDB: A Scalable Metadata Storage Engine for Cloud Data Lakes
Open Source Linux
Open Source Linux
Sep 28, 2022 · Cloud Native

What Really Makes a Kubernetes Pod? Inside Its Isolation, Namespaces & Cgroups

This article explores how Kubernetes Pods differ from simple containers by examining their underlying implementation, shared network and IPC namespaces, cgroup hierarchies, and the role of the pause sandbox, while also demonstrating how similar pod-like behavior can be achieved using Docker and cgroup tools.

ContainerDockerKubernetes
0 likes · 20 min read
What Really Makes a Kubernetes Pod? Inside Its Isolation, Namespaces & Cgroups
Bilibili Tech
Bilibili Tech
Jun 17, 2022 · Information Security

Container Escape Techniques, Exploits, and Mitigation Strategies

The article explains how attackers can break out of Docker containers by exploiting misconfigurations, vulnerable Docker components, kernel bugs, or Kubernetes RBAC errors, illustrates real‑world exploits such as host‑proc mounts and CVE‑2019‑5736, and provides mitigation steps like limiting privileges, updating software, and securing configurations.

Container SecurityDockerNamespace
0 likes · 15 min read
Container Escape Techniques, Exploits, and Mitigation Strategies
Cloud Native Technology Community
Cloud Native Technology Community
Dec 2, 2021 · Cloud Native

Understanding cgroup and namespace in Linux for Cloud‑Native Containers

This article explains the role of Linux cgroup and namespace technologies in providing resource isolation and security for containers, traces their historical development from early chroot mechanisms to modern Docker and Kubernetes, and details cgroup architecture, core files, migration, delegation, and practical usage examples.

ContainerDockerLinux
0 likes · 17 min read
Understanding cgroup and namespace in Linux for Cloud‑Native Containers
Tencent Cloud Developer
Tencent Cloud Developer
Sep 6, 2021 · Cloud Native

From Docker to Kubernetes: A Comprehensive Guide to Containerization Technology

This guide introduces beginners to containerization by explaining Docker’s core components, Linux kernel mechanisms, and networking, then progresses to Kubernetes, detailing its architecture, key objects such as Pods, Deployments, Services, and storage concepts, and how they orchestrate distributed container workloads.

Cloud NativeDockerKubernetes
0 likes · 28 min read
From Docker to Kubernetes: A Comprehensive Guide to Containerization Technology
Programmer DD
Programmer DD
Jul 29, 2021 · Backend Development

Avoid Elastic Job Name Conflicts with Namespace Isolation

This article explains why Elastic Job tasks can clash in ZooKeeper when they share the same name but different classes, and shows how using the namespace property—especially tying it to the Spring Boot application name—effectively isolates jobs and prevents such conflicts.

Namespaceelasticjobjob-conflict
0 likes · 7 min read
Avoid Elastic Job Name Conflicts with Namespace Isolation
dbaplus Community
dbaplus Community
Jun 28, 2021 · Cloud Native

From chroot to Kubernetes: Choosing the Right Redis Container Strategy

This talk walks through the evolution of containerization—from early chroot and jails to modern Kubernetes—explains Redis’s core features, compares various container solutions for Redis deployment, and offers practical guidance on installation, scaling, monitoring, and fault recovery in both single‑instance and clustered environments.

DockerKubernetesNamespace
0 likes · 30 min read
From chroot to Kubernetes: Choosing the Right Redis Container Strategy
php Courses
php Courses
Apr 7, 2021 · Backend Development

Using Namespaces, Aliases, Traits, and Closures in PHP

This article demonstrates how to use PHP namespaces with the `use` keyword, create aliases for classes, functions, and constants, incorporate traits, and capture variables in anonymous functions, providing clear code examples for each concept.

AliasNamespaceclosure
0 likes · 2 min read
Using Namespaces, Aliases, Traits, and Closures in PHP
Open Source Linux
Open Source Linux
Jan 7, 2021 · Cloud Native

Master Kubernetes Basics: From Pods to Deployments and kubectl

This comprehensive guide walks beginners through Kubernetes fundamentals, covering the architecture, core components such as Pods, Deployments, Services, Ingress, and Namespaces, and provides step‑by‑step instructions for configuring kubectl, deploying workloads, managing resources, and troubleshooting common issues.

KubernetesNamespaceService
0 likes · 36 min read
Master Kubernetes Basics: From Pods to Deployments and kubectl
Ops Development Stories
Ops Development Stories
Mar 27, 2020 · Cloud Native

Master Kubernetes LimitRange: Control Pod Resources Efficiently

This article explains how Kubernetes LimitRange lets you set default CPU and memory requests and limits for Pods within a namespace, provides step‑by‑step configuration examples, demonstrates common usage scenarios, and shows how to test and verify the limits, including for PersistentVolumeClaims.

KubernetesLimitRangeNamespace
0 likes · 9 min read
Master Kubernetes LimitRange: Control Pod Resources Efficiently
Alibaba Cloud Native
Alibaba Cloud Native
Jan 10, 2020 · Cloud Native

How to Secure Multi‑Tenant Kubernetes Clusters: Practical Isolation Strategies

This article explains the concept of multi‑tenant Kubernetes clusters, distinguishes soft and hard isolation, describes common enterprise and SaaS/KaaS scenarios, and provides step‑by‑step guidance on using native Kubernetes features such as RBAC, NetworkPolicy, PSP, OPA, resource quotas, pod priority, node taints, and secret encryption to achieve robust security isolation.

KubernetesNamespaceNetworkPolicy
0 likes · 14 min read
How to Secure Multi‑Tenant Kubernetes Clusters: Practical Isolation Strategies
21CTO
21CTO
Aug 17, 2019 · Cloud Native

A Father‑Daughter Tale That Explains Kubernetes Basics

Through a charming story of a curious daughter and her father's illustrated guide, the article introduces Kubernetes concepts such as pods, replication controllers, services, volumes, and namespaces, using the adventures of a PHP app named Phippy to make complex container orchestration easy to understand.

ContainersNamespacePods
0 likes · 7 min read
A Father‑Daughter Tale That Explains Kubernetes Basics
dbaplus Community
dbaplus Community
Jul 25, 2019 · Operations

How to Secure Docker Containers with Namespaces and Cgroups

This guide explains Docker's Namespace and Cgroup mechanisms, shows how to configure them to limit resources and isolate containers, and demonstrates practical commands for protecting container security while highlighting their limitations.

Container SecurityDockerLinux
0 likes · 16 min read
How to Secure Docker Containers with Namespaces and Cgroups
21CTO
21CTO
Jul 18, 2019 · Backend Development

Why Jakarta EE Renamed Java EE Specs and What It Means for Developers

Jakarta EE, the rebranded successor to Java EE, has renamed each specification to clarify its future role, switched from the javax to jakarta namespace, and introduced consistent naming, affecting developers who must adjust dependencies and consider compatibility with servers and frameworks like MicroProfile and Quarkus.

Enterprise JavaJava EEMicroProfile
0 likes · 4 min read
Why Jakarta EE Renamed Java EE Specs and What It Means for Developers
Programmer DD
Programmer DD
Jul 14, 2019 · Cloud Native

A Tale of Phippy: Understanding Kubernetes Through Storytelling

Through the whimsical story of a lonely PHP app named Phippy, the article introduces core Kubernetes concepts—containers, Pods, Replication Controllers, Services, Volumes, and Namespaces—using vivid metaphors to help readers grasp how container orchestration works in modern cloud-native environments.

ContainersKubernetesNamespace
0 likes · 10 min read
A Tale of Phippy: Understanding Kubernetes Through Storytelling
58 Tech
58 Tech
Jun 21, 2019 · Cloud Native

Investigation and Resolution of Kubernetes API Server and Etcd Performance Bottlenecks in the 58 Cloud Platform

The article analyzes a slowdown issue in the 58 Cloud Platform caused by an overloaded API Server and uneven Etcd load, explains the root causes—including load‑balancing failure and missing namespace segmentation—and presents concrete remediation steps such as DNS round‑robin, namespace partitioning, Etcd client upgrade, and cache‑enabled queries.

Cloud NativeKubernetesNamespace
0 likes · 15 min read
Investigation and Resolution of Kubernetes API Server and Etcd Performance Bottlenecks in the 58 Cloud Platform
360 Zhihui Cloud Developer
360 Zhihui Cloud Developer
Aug 21, 2018 · Cloud Native

Kubernetes Namespace Resource Quotas: Set Defaults, Limits, and Enforce Policies

This guide explains how Kubernetes namespace-level resource management lets administrators set default CPU/memory requests, define minimum and maximum constraints, and enforce resource quotas, with step‑by‑step commands and YAML examples to create namespaces, ResourceQuota objects, and pods while handling quota limits.

Cloud NativeKubernetesNamespace
0 likes · 9 min read
Kubernetes Namespace Resource Quotas: Set Defaults, Limits, and Enforce Policies
Java High-Performance Architecture
Java High-Performance Architecture
Sep 15, 2015 · Frontend Development

Why Non‑Modular JavaScript Is Painful and How CMD Solves It

Non-modular JavaScript leads to naming conflicts and tangled file dependencies, but adopting a module system like CMD eliminates these issues by encapsulating functionality, simplifying imports with define, require, and exports, and streamlining project structure for scalable front‑end development.

JavaScriptModular DevelopmentNamespace
0 likes · 4 min read
Why Non‑Modular JavaScript Is Painful and How CMD Solves It
Baidu Tech Salon
Baidu Tech Salon
Dec 12, 2014 · Frontend Development

Overview of HTML5 and Prospects for HTML6

HTML5, widely adopted for audio, video, offline storage and new semantic elements, remains evolving, while the speculative HTML6 proposal envisions namespace‑prefixed custom tags such as logo and html:media, richer metadata, unified APIs, and clearer semantics to improve readability and media handling, though it is not yet finalized.

Custom TagsHTMLHTML6
0 likes · 10 min read
Overview of HTML5 and Prospects for HTML6