What's new in Docker 20.10

First, let's remind ourselves how Docker works. Docker uses foundational Linux Kernel features to isolate the running processes and their corresponding files. To achieve this and package processes in containers, Docker uses Linux namespaces in combination with cgroups. To refresh your memory cgroups are responsible for limiting the resource usage (e.g., CPU, memory, disk, etc.) of a process. This has the effect that one set of processes can only see one set of resources, while another set of processes sees a different set of resources.