Back to Glossary Index
Infrastructure 3 min read

Container

Isolated Software Execution Environment

Plain-English Summary

A lightweight, standalone package with code, runtime, system libraries, and configs.

Deep Dive & Explanation

Containers bundle software applications along with all their dependencies, environment variables, and system tools into a single immutable image. Unlike virtual machines, which virtualize physical hardware and require a guest OS, containers share the host Linux kernel and run as isolated OS-level processes. This architecture makes them incredibly fast to boot and highly resource-efficient.

Key Architectural Benefits

  • Portability: Runs identically on a local laptop, on-prem staging, or multi-node Kubernetes clusters.
  • Resource Efficiency: High socket and process density, booting in seconds instead of minutes.
  • Isolation: Prevents conflicting dependency versions from interfering on the same host.
  • Immutability: Images are built once and promoted through testing to production unmodified.

Interactive Example / Code Snippet

FROM php:8.2-fpm-alpine
WORKDIR /var/www
COPY . /var/www
RUN docker-php-ext-install pdo_mysql
EXPOSE 9000
CMD ["php-fpm"]

Security & Production Considerations

Containers share the host kernel, meaning security audits should enforce running processes under non-root profiles and utilizing slim base images.

Missing something?

Contribute a missing technical term or enhance our existing guidelines definitions.

Contribute Term

Practice in Sandbox

Launch our fully featured Monaco IDE code sandbox and compile scripts directly in the browser.

Open IDE Sandbox