360 Secure SkillHub
360 安全技能中心

Container

该 Skill 提供容器技术参考资料,通过脚本子命令输出容器历史与 OCI 标准、Linux 命名空间、cgroups、镜像分层、网络、存储、运行时比较和安全机制等说明,适合学习概念或排查容器问题,不实际创建或管理容器。

bytesagain
bytesagain
热度 21.97
最近更新 2026-03-21 20:51:53
分类:知识依赖:代码执行应用场景:概念解释 / DevOps / 调试排错

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add container
Metadata
name
container
version
1.0.0
description
Container technology reference — Docker, OCI images, namespaces, cgroups, and container runtime internals. Use when understanding container isolation, image layering, or debugging container issues.
author
BytesAgain
homepage
https://bytesagain.com
source
https://github.com/bytesagain/ai-skills
tags
["container","docker","oci","cgroups","namespaces","runtime","devops"]
category
devtools

Container — Container Technology Reference

Quick-reference skill for container internals, image formats, and runtime mechanics.

When to Use

  • Understanding how containers provide process isolation
  • Debugging container networking, storage, or resource issues
  • Learning OCI image specification and layer mechanics
  • Comparing container runtimes (runc, containerd, CRI-O)
  • Optimizing Dockerfile builds for smaller, faster images

Commands

intro

scripts/script.sh intro

Overview of container technology — history, OCI standards, and architecture.

namespaces

scripts/script.sh namespaces

Linux namespaces — the isolation mechanism behind containers.

cgroups

scripts/script.sh cgroups

Control groups — resource limiting for CPU, memory, I/O, and PIDs.

images

scripts/script.sh images

OCI image format — layers, manifests, and union filesystems.

networking

scripts/script.sh networking

Container networking — bridge, host, overlay, and CNI plugins.

storage

scripts/script.sh storage

Container storage — volumes, bind mounts, and storage drivers.

runtimes

scripts/script.sh runtimes

Container runtimes compared: runc, containerd, CRI-O, Kata, gVisor.

security

scripts/script.sh security

Container security — capabilities, seccomp, AppArmor, rootless mode.

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Variable Description
CONTAINER_DIR Data directory (default: ~/.container/)

Powered by BytesAgain | bytesagain.com | hello@bytesagain.com