The best way to learn something is to break it or to build it yourself. And that's precisely what Luca did to understand how Linux containers (and Docker) work: he built his own, Barco. In this episode of KubeFM, you will learn: Why Linux containers "don't exist" but are the product of several Linux features you can put together and configure properly to get what we know as containers. How Kernel features such as cgroups and namespaces isolate a process. How you can use seccomp and capabilities to secure the container. How to make the right syscall from C to build your own container engine. Also, Luca explained how he learned how to build Barco from scratch, detailing the (struggle) to find reputable sources and (lack of) respected books. Sponsor This episode is sponsored by Learnk8s — become an expert in Kubernetes More info Find all the links and info for this episode here: https://kube.fm/barco-luca Interested in sponsoring an episode? Learn more.