The hidden design compromises of Docker layers
Summary
An in-depth look at how Docker image layers are a sequence of filesystem changesets rather than snapshots. It explains whiteouts (.wh.*) and opaque markers, why deletions are tricky, and how layer serialization can diverge from local snapshots, with practical implications for image size and portability.