The present invention relates to a Docker-container-oriented method for isolation of file system resources, which allocates host file system resources according to access requests from containers and checks lock resources corresponding to the access requests. The method creates a plurality of new containers; allocating the host file system resources according to file resource request parameters required by the new containers; and controlling execution of the file system operation according to an amount of the file system resources that have been allocated to the new containers.