I’ve been using Docker for a while, but at some point I realized I didn’t actually understand what it was doing under the hood.

How does a process suddenly get its own filesystem, its own network, its own environment?

So instead of reading more blogs, I decided to build it myself.

No Docker. No containerd. No LXC.

Just namespaces, cgroups, networking, and filesystem isolation.