Open Source Summit + ELC North America 2019

Containers have become ubiquitous. Nowadays, the computing landscape is mostly concerned with a higher-level view on the functionality and features of containers. In this talk we will take a step back and focus on the low-level aspects that make containers possible. Specifically, we will look at new kernel features that have been implemented. This includes work such as shiftfs, a filesystem to translate between on-disk ids into a user namespace idmapping, a new seccomp interface which allows to defer decisions about whether or not a syscall is considered successful or not to userspace and other features.