Tool · September 2026
Containers From Scratch
An educational Linux container runtime that uses namespaces, chroot, proc/tmpfs/dev mounts, and a process-count cgroup to demonstrate how container isolation works under the hood.
About this project
- Creates a minimal root filesystem and starts processes inside isolated PID, UTS, mount, network, and IPC namespaces.
- Uses chroot plus proc, tmpfs, and /dev mounts to provide the container with its own filesystem view.
- Applies a pids cgroup limit and cleans up the process group when the container exits.
Technologies
Go · Linux Namespaces · chroot · cgroups