LinkedIn·Tuesday, 18 August 2026·7d ago

Ever wondered what's actually happening under the hood when you run "podman run"? During today's internal lunch sessions, Peter took the…

Kangaroot

2,391 followers

Ever wondered what's actually happening under the hood when you run "podman run"? During today's internal lunch sessions, Peter took the team through the mechanics of containers; not the marketing version, the real one. A few things that stuck: * Namespaces are the real magic. Mount, network, user, time... each one carves out a slice of the system so a container sees its own world, isolated from the host. * Images are layers, not files. Every container image is a stack of read-only layers merged together, with one writable layer on top. Change a file, and it gets copied up before it's modified; the layers underneath never move. * Isolation goes deeper than you'd think. Even time & networking get their own namespace, so a container can have its own hostname, its own view of the network, sometimes even its own clock behaviour. Great reminder that the tools we use daily (Podman, Docker, whatever your poison) are really just clever orchestration of Linux kernel primitives. #Podman #Linux #opensource #teamkanga