DOCKER IS WEIRD

Summary from the TLDR Dev newsletter

Building a container runtime exposes Docker as a collection of Linux mechanisms, including namespaces, cgroups, and filesystem isolation around ordinary processes. This walkthrough explains why Go's multithreaded runtime complicates container setup and why rootless networking often requires extra work in userspace.