1. The hidden design compromises of Docker layers (loige.co)
How Docker and OCI image layers represent filesystem changes, why deleting a file needs special whiteout entries, and what happens if you create a file called .wh.foo.