| --- |
| title: Apache Mesos - Mesos Containerizer |
| layout: documentation |
| --- |
| |
| # Mesos Containerizer |
| |
| The Mesos Containerizer provides lightweight containerization and |
| resource isolation of executors using Linux-specific functionality |
| such as control cgroups and namespaces. It is composable so operators |
| can selectively enable different [isolators](#isolators). |
| |
| It also provides basic support for POSIX systems (e.g., OSX) but |
| without any actual isolation, only resource usage reporting. |
| |
| ## Isolators |
| |
| Isolators are components that each define an aspect of how a tasks |
| execution environment (or container) is constructed. Isolators can |
| control how containers are isolated from each other, how task resource |
| limits are enforced, how networking is configured, how security |
| policies are applied. |
| |
| Since the isolator interface is [modularized](modules.md), operators |
| can write modules that implement custom isolators. |
| |
| Mesos supports the following built-in isolators. |
| |
| - appc/runtime |
| - [cgroups/blkio](isolators/cgroups-blkio.md) |
| - [cgroups/cpu](isolators/cgroups-cpu.md) |
| - cgroups/cpuset |
| - [cgroups/devices](isolators/cgroups-devices.md) |
| - cgroups/hugetlb |
| - cgroups/mem |
| - [cgroups/net_cls](isolators/cgroups-net-cls.md) |
| - cgroups/net\_prio |
| - cgroups/perf\_event |
| - cgroups/pids |
| - [disk/du](isolators/disk-du.md) |
| - [disk/xfs](isolators/disk-xfs.md) |
| - [docker/runtime](isolators/docker-runtime.md) |
| - [docker/volume](isolators/docker-volume.md) |
| - [environment\_secret](secrets.md#environment-based-secrets) |
| - [filesystem/linux](isolators/filesystems.md) |
| - [filesystem/posix](isolators/filesystems.md) |
| - [filesystem/shared](isolators/filesystem-shared.md) |
| - filesystem/windows |
| - [gpu/nvidia](gpu-support.md) |
| - [linux/capabilities](isolators/linux-capabilities.md) |
| - [linux/devices](isolators/linux-devices.md) |
| - [linux/nnp](isolators/linux-nnp.md) |
| - [linux/seccomp](isolators/linux-seccomp.md) |
| - [namespaces/ipc](isolators/namespaces-ipc.md) |
| - [namespaces/pid](isolators/namespaces-pid.md) |
| - [network/cni](cni.md) |
| - [network/port_mapping](isolators/network-port-mapping.md) |
| - [network/ports](isolators/network-ports.md) |
| - posix/cpu |
| - posix/mem |
| - [posix/rlimits](isolators/posix-rlimits.md) |
| - [volume/host_path](container-volume.md#host_path-volume-source) |
| - volume/image |
| - [volume/sandbox_path](container-volume.md#sandbox_path-volume-source) |
| - [volume/secret](secrets.md#file-based-secrets) |
| - [windows/cpu](isolators/windows.md#cpu-limits) |
| - [windows/mem](isolators/windows.md#memory-limits) |
