Topic
15 posts tagged “Containers”.
Chisato · · 4 min read VMs virtualize hardware with a full guest OS per instance; containers share the host kernel and isolate processes. What that trade-off costs and buys you.
Chisato · · 4 min read Linux namespaces isolate what a process can see; cgroups limit what it can use. Together they're the kernel primitives that make a container a container.
Chisato · · 5 min read Docker's default bridge network isolates containers with NAT; host mode shares the host's network stack; overlay connects containers across hosts.
Chisato · · 4 min read Docker runs containers through a persistent root daemon; Podman runs them daemonless and rootless by default. What that architectural split changes.
The Lycoris Team · · 4 min read Multi-stage builds let a Dockerfile use one stage to compile code and a separate, minimal stage to ship it — cutting image size and attack surface.
Chisato · · 5 min read Docker volumes are managed by Docker and portable; bind mounts map a host path directly into a container. When to use each for persistent data.
The Lycoris Team · · 3 min read Docker Compose defines multiple containers, networks, and volumes in one YAML file so you can start a whole application stack with a single command.
Chisato · · 4 min read A container escape is when code running inside a container breaks out to access the host system, defeating the isolation containers are meant to provide.
The Lycoris Team · · 3 min read A container registry stores and distributes container images by content-addressed layers, letting Docker and Kubernetes pull only what's changed.
Chisato · · 4 min read A liveness probe restarts a stuck container; a readiness probe pulls it from traffic without restarting it. How Kubernetes uses each one.
Chisato · · 4 min read Docker images are stacks of read-only layers cached by content hash. How layer order affects build speed, cache hits, and final image size.
Chisato · · 5 min read Pods, Deployments, and Services are the three Kubernetes objects every beginner must understand. What each one does and how they fit together.
Chisato · · 5 min read Docker builds and runs containers; Kubernetes orchestrates fleets of them. What each tool does, how they work together, and when Compose is enough.
Chisato · · 2 min read Docker packages your app and everything it needs into one portable container. Learn the core concepts and ship your first containerized app in minutes.
Chisato · · 6 min read Kubernetes (K8s) is the open-source system for deploying, scaling, and managing containers. A plain-English definition, core concepts, and when to use it.
