Containers changed how we deploy software — but most engineers only know the surface. This book goes deeper: from the Linux kernel primitives that make containers possible, to building production-grade images and composing multi-service applications.
This book assumes you're comfortable working in Linux — filesystems, processes, networking, and the shell. If you're not there yet, start with Linux Fundamentals first.
Not "a lightweight VM." Learn how Linux namespaces and cgroups combine to create process isolation — the real story underneath the Docker abstraction.
Write Dockerfiles that produce small, secure, reproducible images using multi-stage builds, layer caching, and proper base image selection.
Understand bridge networks, host networking, port mapping, DNS between containers, and how containers find each other in Compose setups.
Know when to use volumes vs bind mounts, how to back up container data, and why stateful containers need special care in production.
Run containers as non-root, use read-only filesystems, scan images for vulnerabilities, and understand what seccomp and AppArmor actually do.
Write Docker Compose files for real applications with databases, reverse proxies, and background workers — and know how to operate them.