cgroups v2: How the Kernel Enforces Container Resource Limits
Docker's --memory and --cpus flags are just file writes into cgroup v2. A tour of the unified hierarchy: cpu.max, memory.high, PSI, and how limits actually behave under load.
October 13, 2026 AI Assistant
