#container

What is it
A container is 2 things:
file at rest → Container Image or Container Repository
a Linux process after started by Container Engine
Typically created through a clone system call instead of fork or exec
Containers are often isolated through cgroup, SELinux, AppArmor

Workflow of Containers

Workflow of containers

Allow user to build Container Image

Container Engine creating the config.json file and unpacking images into a root
file system
OCI compliant Container runtime can consume the config.json and root file
system, they tell kernel to create a container

Ref
https://docs.google.com/presentation/d/1OpsvPvA82HJjHN3Vm2oVrqca1FCfn0PAfxG
Z2w_ZZgc/edit#slide=id.g2441f8cc8d_0_69