Docker provides you with the isolation of containers using the Linux container technology, such as LXC and now libcontainer. Libcontainer is Docker's own implementation in the Go programming language to access the kernel namespace and control groups. This namespace is used for process-level isolation, while control groups is used for restricting the resource usage of running containers. Since the containers run as independent processes directly over the Linux kernel, the generally available (GA) debugging tools are not fit enough to work inside the containers to debug the containerized processes. Docker now provides you with a rich set of tools to effectively debug the container, as well as processes inside the container itself. Docker exec will allow you to log in to the container without running an SSH daemon in the container.

Docker stats provides information about the container's memory and CPU usage. Docker events reports the events, such as create, destroy, kill, and so on...