How Docker Works Under the Hood: Watch Namespaces Isolate a Container and cgroups Stop a Fork Bomb

On a Linux host, start an nginx container, then run ps aux. nginx is right there in the list, with an...