Part I of this Deep Dive on containers introduces the idea of kernel control groups, or cgroups, and the way you can isolate, limit and monitor selected userspace applications. Here, I dive a bit ...

I have a Proxmox host with an unprivileged container, running Frigate NVR in Docker, because Docker is the only supported way to run Frigate. I could use a VM but then I'd have to pass the whole iGPU ...

I recently started dipping my toes into homelab/self-hosted stuff and after encountering docker in my workplace travails I got kinda excited to start playing with it at home when it came into my life ...