Docker Root Switch Explained: The Linux Kernel Secret Behind Container Security

Ever wonder what actually happens inside Docker when a container starts? This episode of Kernel Primitives exposes the Linux kernel secret that powers Docker, Kubernetes, and every container runtime: pivot_root vs chroot. We build a real container from scratch using unshare and pivot_root to show you exactly how container isolation works at the kernel level. No Docker. No Kubernetes. Just the kernel. What you'll learn: • Why chroot is NOT real isolation (and where it breaks) • How pivot_root actually replaces the root filesystem • How to build a custom RootFS with automatic dependency resolution • How unshare creates full namespace isolation (PID, mount, UTS, IPC, net) • What happens to the old root (/old_root) after pivot • Why your process becomes PID 1 inside a container • Why mounting /proc is required for real container behavior Commands covered: pivot_root · unshare · chroot · mount --bind · ldd · mount -t proc ▬▬▬▬▬▬▬ Timestamps ▬▬▬▬▬▬▬ 00:00 - Why Containers Need pivot_root 00:23 - Prerequisites: pivot_root & Root Privileges 00:55 - Exploring the Current Root Filesystem 01:16 - Building a Custom RootFS from Scratch with a Shell Script 06:02 - Creating a Container with Namespaces + Performing the Real pivot_root 09:33 - What Happens to the Old Host Root? (It Doesn't Get Deleted) 10:00 - Mounting /proc & Becoming a Real Container (PID 1 Moment) 10:56 - Outro & What's Next in Kernel Primitive If you're serious about DevOps, Linux internals, or container runtimes, this is the foundation. Watch Related Playlists: - Kubernetes Gateway API: https://www.youtube.com/playlist?list=PL-K2rw28HIwYxzgTFmObuFhfctfBPAc6h - Kubernetes: https://www.youtube.com/playlist?list=PL-K2rw28HIwZVMo9CtbV0wDu548SN0h9Y - Github Actions: https://www.youtube.com/playlist?list=PL-K2rw28HIwYfq7SqYnBzAxlUhcYP7ldM - Ansible: https://www.youtube.com/playlist?list=PL-K2rw28HIwaavCXTYEWF4mP431KmKtEY - AWX: https://www.youtube.com/playlist?list=PL-K2rw28HIwbTtijpBMrOaHdnWGXdOkYa - AI: https://www.youtube.com/playlist?list=PL-K2rw28HIwaSvmI8oFeSQDl4cVTdxaGQ ▬▬▬▬▬▬ Connect with me ▬▬▬▬▬▬ LinkedIn: https://www.linkedin.com/in/kumar-nikhil811/ Website: https://techinik.com Medium: https://medium.com/@kumarnikhil811 #pivot_root #linux #containers #devops #kubernetes #containerinternals