Table of Contents

Container Concepts

Definitions

A container is a running instance of a container image

A container Image is a single tarball file, loaded with metadata, that has all the files by the application

The entry point is the command used to start your container

Technology that powers containerization

Kernel Namespaces

Control Groups (cgroups)

SELinux

seccomp

End state is to have3 Containers

Creating container Images

Container Runtme

Container Management tools

Differences between Containers and VMs

Virtual Machines Containers
full OS no OS
kernel inside no kernel
lower level access to hardware Limited access to hardware
more resources required light weight & can be root less

Containers can be run without root priviledges (root less)