Simple definition
An isolated environment that executes an application with its dependencies without virtualizing a complete operating system.
Technical definition
Containers share the host kernel while insulating process, network and file system using mechanisms such as namespaces and cgroups.
What is it used for ?
Deploy applications lightly, portablely and reproduciblely.
Practical example
A web application and its libraries can be distributed as a container image.
Common issues
- Vulnerable image
- Secrets embedded in the image
- Persistent data not well managed
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.