CPU Rings & Traps
How CPUs protect themselves — and why virtualizing x86 was a 20-year puzzle.
Virtualization
Virt 01 — CPU Virtualization2 articles
Hypervisors (KVM, QEMU, virtio)
The software layer that makes virtual machines possible.
Virt 02 — Namespaces2 articles
Namespace Theory & Core Types
The isolation primitive — giving each process its own view of the system.
Advanced Types & Container Birth
IPC, User, Cgroup, Time namespaces — and how they combine to create a container.
Virt 03 — cgroups3 articles
cgroup Fundamentals
Resource control at the kernel level — not isolation, but limits and accounting.
Controllers (CPU, Memory, I/O)
CPU throttling, memory limits, I/O control, and fork bomb protection.
cgroups in Practice (Docker & K8s)
How container platforms translate user-facing flags to cgroup files.
Virt 04 — Security2 articles
Capabilities & Seccomp
Splitting root into pieces and filtering dangerous syscalls.
LSMs, AppArmor & SELinux
Mandatory Access Control — the last line of container defense.
Virt 05 — Container Images3 articles
OCI Image Specification
What a container image actually is — not a VM disk, but a stack of tarballs with metadata.
Union Filesystems & OverlayFS
How multiple read-only layers merge into a single writable filesystem view.
Building Images (Dockerfile & BuildKit)
Dockerfile mechanics, layer caching, multi-stage builds, and BuildKit.
Virt 06 — Container Runtimes3 articles
OCI Runtime Spec & runc
Given a rootfs and a config.json — how a container actually starts.
containerd & CRI
Why runc isn't enough — image management, supervision, and Kubernetes integration.
Sandboxed Runtimes
When shared kernel isn't secure enough — gVisor, Kata, Firecracker, and Wasm.
Virt 07 — Docker Internals3 articles
Docker Architecture
From docker run to container process — every layer of the Docker stack.
Volumes & Storage
Solving the persistence problem — bind mounts, named volumes, and tmpfs.
Resource Limits
CPU, memory, I/O, and PID limits — and what happens when they're exceeded.
Virt 08 — K8s Architecture3 articles
Control Plane
The brain of the cluster — API server, etcd, scheduler, and controllers.
Kubelet & Container Runtime
The node agent — from scheduled pod to running containers.
Workloads & Scheduling
Deployments, StatefulSets, DaemonSets — and how pods land on nodes.
Virt 09 — K8s Storage2 articles
PV, PVC & StorageClass
Kubernetes persistent storage — abstracting infrastructure from applications.
Container Storage Interface (CSI)
Decoupling storage providers from Kubernetes — the plugin architecture.
Virt 10 — Proxmox KVM3 articles
Proxmox Architecture
Open-source virtualization management — KVM VMs and LXC containers on Debian.
VM Lifecycle & Networking
Creating, migrating, and connecting VMs in Proxmox.
Storage & High Availability
Storage backends, ZFS, Ceph, clustering, and automatic failover.
