← All deep dives

System Isolation

Linux · Efficiency

Explains the kernel primitives — namespaces, cgroups, capabilities, and swap/OOM behavior — that isolate and constrain processes (and underlie every container).

3 steps · linux.bradpenney.io

1

Namespaces and cgroups: How Linux Isolates a Process

2

Linux Capabilities: Breaking Up Root

3

Swap and the OOM Killer: What Happens When Memory Runs Out