How Docker Containers Make Use of Cgroups

Allocating finite compute resources efficiently among multiple processes on a shared machine can be difficult. A single greedy process, known as a noisy neighbour, can monopolize all system resources (CPU, memory, network bandwidth), depriving other containers and potentially causing the entire system to crash. The Linux kernel uses control groups, or c…