Tag: #oci
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 6 posts
You Added Registry Instances and Availability Did Not Move — What zot Scale-Out Actually Sells
Taking zot as the example, this post takes apart the scaling design of a container registry. A structure that assigns repositories to instances by consistent hashing and has non-owner nodes proxy the request onward is sh
2026-08-09 · 8 min read #devops#oci#registry#zot#containerEROFS Native Layers in containerd 2.3 — What You Get in Exchange for Removing Unpack
containerd 2.3, released on April 30, 2026, opened a path to pull an EROFS filesystem image straight from the registry and mount it as-is. Since there's no tar to unpack, the entire unpack step disappears, leaving behind
2026-07-16 · 18 min read #container#containerd#oci#storage#linuxContainer Runtimes 2026 Deep Dive - containerd, runc, Podman, CRI-O, Kata, gVisor, Firecracker, Wasm
A full-stack tour of production container runtimes as of May 2026. We cover containerd (de facto Kubernetes CRI), low-level OCI runtimes runc, crun, and youki, the alternative CRI CRI-O, the rootless/daemonless trio Podm
2026-05-16 · 16 min read #container-runtime#containerd#runc#podman#cri-oDocker BuildKit & Image Layers Complete Guide 2025: LLB, Cache Mount, Multi-Stage, OCI, Build Optimization Deep Dive
Why is the same Dockerfile 10x faster with BuildKit? Image layer structure, BuildKit LLB, cache mount, multi-stage builds, OCI format, reproducible builds — a complete 720-line analysis of everything about modern contain
2026-04-15 · 26 min read #docker#buildkit#oci#image-layer#cache-mountContainer & Docker Internals Deep Dive — Namespace, cgroups, OverlayFS, seccomp, Capabilities and Kubernetes (2025)
"A container is not a lightweight VM." Behind a single docker run there are 7 Linux namespaces, cgroups v2, OverlayFS layers, seccomp filters, and Linux capabilities. From LXC in 2008 to Docker in 2013, OCI standardizati
2026-04-15 · 12 min read #docker#container#namespace#cgroups#overlayfsThe Complete Guide to Docker & Podman Commands: Container Operations, All on One Page
From the architectural differences between Docker and Podman to image management, the container lifecycle, networking, volumes, Docker Compose vs Podman Compose, security (rootless), multi-stage builds, and debugging — a
2026-03-01 · 52 min read #docker#podman#container#devops#kubernetes