What a Linux container really is (it's not a VM)

Right now, on your machine, a process is being lied to. It thinks it's alone on the computer. It thinks it owns the whole filesystem. It thinks its process ID is 1. None of that is true. It's running right next to everything else, on the same kernel — and the kernel is lying to its face. That lie has a name. We call it a container. Prefer to...