Gocker

A container runtime built from scratch in Go, to stop taking the abstraction on faith.

Skills

Go · Linux namespaces · cgroups · overlayfs

Contributions

• Implemented PID, UTS, NET and MNT namespace isolation.
• Enforced CPU and memory limits through cgroups.
• Built overlay-based image layers.