Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory?

Will this Linux kernel facility limit a Docker container’s access to host resources, such as CPU or memory?

Solution: namespaces
A . Yes
B . No

View Answer

Answer: A

Explanation:

Namespaces are a Linux kernel feature that isolate containers from each other and from the host system. They limit the access of a container to host resources, such as CPU or memory, by creating a separate namespace for each aspect of a container, such as process IDs, network interfaces, user IDs, etc. This way, a container can only see and use the resources that belong to its own namespace, and not those of other containers or the host12.

Reference: Isolate containers with a user namespace | Docker Docs

Docker overview | Docker Docs