Docker Engine and containerd – Linux security features

Docker Engine, which you installed previously, acts as the coordinator for all your application containers. In addition to the engine are other key components that make up the Docker ecosystem. Initially, many of the components were baked into Docker Engine, but over the years, in order to make the engine smaller and faster, some components, such as the runtime mechanism for managing containers, were broken down into separate projects.

One example of this is the containerd project. containerd, which implements runc, allows container management and is used in a number of related projects beyond Docker, including Kubernetes CRI.

Note

You can download and view the source code for containerd from GitHub at https://github.com/docker/containerd and runc at https://github.com/opencontainers/runc.

containerd solves the problem of aggregating a number of features in the Linux kernel and providing an abstraction layer...