Notworking with a Whale: A Tale of Dockers, Networks, and Problem Solving
summary
Goal is to trace a host port back to the host process ID for a service running in a Docker container, and the story is about what actually works. Shows failed attempts with lxc‑netstat and mcenter across Ubuntu 14 and 16, then using docker inspect to get the container PID and the IP net NS exec / nsenter technique plus a symlink into /var/run/netns to run netstat with the right network namespaces and reliably produce the mapping.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:10What is Docker
- 3:19Finding process IDs in Docker
- 5:01Failed attempts with netstat
- 6:29M Center limitations
- 7:11IP net NS discovery
- 8:15Linux namespaces in Docker
- 10:21Solution with IP net NS exec
- 11:04Conclusion and key takeaways
related talks
15mThe Whale, the Container, and the Ocean - A Docker Tale
23mLife of a Container
30mWhat’s Under the Hood of Docker? Process Separation in the Linux kernel
43mPanel Discussion: Containers and Networking: A Symbiotic Relationship
26mHow to Debug the Pod Which is Hard to Debug
49mIn Silicon Valley, Engineers Deploy-and-Tell: Stories About Dockerizing an Application
32mSeals to the Rescue of Whales - Discovering Podman
36mUnderstanding Windows Container Network in Kubernetes Using a Real Story