A container is a process environment started from an image and isolated with operating-system mechanisms while still sharing the host kernel.
The practical questions are: what is packaged, where is it stored, what starts the process, and which host resources can it access?
In this chapter
- Images, containers, and registriesSeparate the immutable package from the running process and the place images are distributed from.
- How containers use GPUsFollow graphics processing unit (GPU) access through host drivers, container libraries, device exposure, and accelerator scheduling.
- Dockerfiles, image builds and isolated executionBuild reproducible artifacts and control risks when executing untrusted code.