Fundamentals

Learn how containers work at a fundamental level. Discover how Linux namespaces and cgroups isolate processes, sharing the host kernel, not a VM.

Explore container fundamentals: learn how images, containers, registries, and orchestrators connect with runnable Docker and Kubernetes examples.

Understand the core differences between containers and virtual machines. Learn when to use each for optimal isolation, density, and performance.

Learn how OCI Image and Runtime Specs enable interoperability for building, running, and sharing container images across diverse tools and registries.

Learn how Linux namespaces control process visibility and cgroups manage resource usage, forming the basis of container isolation.

Learn the immutable infrastructure principle for containers: build new artifacts, replace old ones, and never modify running instances for reliable deployments.

Learn container best practices for production environments, covering process shape, image hygiene, security, resource management, and runtime.

A single-page roundup of every highlight bullet from the 7 pages in the Fundamentals section, grouped by source page so you can scan all 42 takeaways without opening each article individually.