Containers Glossary
Browse 76 containers terms defined in plain English, from the cultural dictionary of computing.
76 Containers Terms
- Alpine Linux
- A lightweight Linux distribution known for small container images, musl, and a security-conscious minimal design.
- Application Container
- A container image or runtime unit that packages an application with its dependencies and executes it in an isolated environment. Application containers...
- Base Image
- The starting container image on top of which additional layers, dependencies, and application code are built. Base image choice affects size, security posture,...
- Build Context
- In Docker, the set of files and directories sent to the Docker daemon when building an image — defined by the path (or URL) argument to docker build — which...
- Cloud Container
- A containerized workload running in a cloud-managed environment, often on orchestration platforms or serverless container services. Cloud containers package...
- Cloud Native Buildpacks
- A specification and tooling ecosystem for turning source code into container images without requiring handwritten Dockerfiles.
- CNI Security
- Security concerns and controls related to container networking interfaces, especially in orchestrated environments such as Kubernetes. CNI security affects...
- Collection
- A generic group of values managed together through a container abstraction such as a list, set, map, queue, or dictionary. Collections are a foundational...
- Container Build
- The process of assembling a container image from a base image, dependencies, application artifacts, and build instructions. Container builds influence image...
- Container Cluster
- A cluster of machines or nodes configured to run and manage containerized workloads together. Container clusters are typically paired with orchestration...
- Container Compose
- A declarative way to define and run multi-container applications, commonly associated with Compose-style configuration files that specify services, networks,...
- Container Config
- The runtime settings, environment variables, mounts, ports, resource limits, and entrypoint details that define how a container runs. Container config is...
- containerd
- An industry-standard container runtime responsible for managing container lifecycle tasks such as image transfer and execution.
- Container Daemon
- A long-running background process that manages container lifecycle operations such as image pulls, creation, startup, networking, and cleanup. Container...
- Container Engine
- The runtime software responsible for creating, starting, stopping, and managing containers and their images. Container engines provide the low-level mechanics...
- Container Escape
- An exploit or misconfiguration that allows code running inside a container to break isolation boundaries and interact with the host or other containers more...
- Container Escape Slang
- Informal or joking language used when talking about breaking out of container boundaries, usually with a mix of security seriousness and dark humor. In...
- Container Exec
- The act of running a command inside an already running container, often for debugging, inspection, or one-off maintenance. Container exec is powerful but...
- Container Health
- The observed readiness and liveness state of a containerized workload, typically based on probes or checks that determine whether it is functioning correctly...
- Container Image
- A Container Image is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Container Init
- The initialization process or small init system used as PID 1 in a container to handle signal forwarding, zombie reaping, and startup behavior correctly....
- Container Layer
- A filesystem layer in a container image created by a build step, stacked together with other layers to form the final image. Layer design affects build...
- Container Lifecycle
- The sequence of states a container goes through from image build and creation to startup, health checks, restarts, shutdown, and removal. Understanding...
- Container Limit
- A configured cap on resources such as CPU, memory, file descriptors, or process count that a container may use. Container limits protect neighboring workloads,...
- Container Log
- The log output emitted by a running container, typically collected from stdout, stderr, or log files and aggregated by the platform. Container logs are central...
- Container Monitor
- A monitoring tool or service that observes container health, resource use, restarts, and workload behavior across containerized environments. Container...
- Container Network
- A Container Network is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Container Orchestration
- A Container Orchestration is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make...
- Container Port
- A network port exposed or listened to by a process running inside a container. Container ports are often mapped or routed differently at the platform level, so...
- Container Probe
- A health or readiness check run against a container to determine whether it is alive, ready to serve traffic, or successfully initialized. Container probes are...
- Container Registry
- A Container Registry is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Container Restart
- The termination and subsequent re-launch of a container, whether triggered intentionally, by policy, or due to failure. Container restarts can recover...
- Container Runtime
- A Container Runtime is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Container Scanning
- The inspection of container images or running containers for vulnerable packages, secrets, misconfigurations, or policy violations. Container scanning helps...
- Container Security
- The set of practices and controls used to protect container images, runtimes, registries, orchestration platforms, and workload boundaries. It spans build-time...
- Container Shell
- An interactive shell session opened inside a running container for inspection, debugging, or one-off commands. Container shells are useful in emergencies, but...
- Container Volume
- A storage mount attached to a container so data can persist beyond the container's writable layer or be shared with other containers and processes. Volumes are...
- CRI-O
- A Kubernetes-focused container runtime implementation designed around the Container Runtime Interface.
- CSS Container Query
- A CSS Container Query is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Cursed Image
- A container image, VM image, or screenshot so wrong, messy, or unsettling that it becomes a team joke. In engineering slang, cursed images usually combine...
- Dev Container
- A Dev Container is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- DevContainer
- A DevContainer is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code easier...
- Docker
- Docker is a platform for building, shipping, and running applications inside lightweight, isolated environments called containers. A container packages an...
- Docker All the Things
- A joking phrase for applying Docker or containerization to everything, sometimes wisely and sometimes with trend-driven excess. In engineering slang, it...
- Docker Compose
- A Docker Compose is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Dockerfile
- A Dockerfile is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code easier...
- Docker Image
- A Docker Image is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code easier...
- Dockerize
- To package an application and its dependencies into a Docker container. 'Can you Dockerize the service by end of day?' has replaced 'can you write deployment...
- Docker Network
- A Docker Network is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Docker Registry
- A Docker Registry is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Docker Security
- The set of practices and controls used to secure container images, runtimes, registries, and hosts in Docker-based environments. It includes image provenance,...
- Docker Swarm
- A Docker Swarm is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code easier...
- Docker Volume
- A Docker Volume is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code...
- Falco
- A runtime security tool for detecting suspicious system and container behavior based on rules and system events.
- Fly.io
- A platform for deploying full-stack applications and databases close to users worldwide using lightweight virtual machines (Firecracker microVMs). Unlike...
- Image
- In containerization, a lightweight, standalone, read-only template containing an application and all its dependencies, from which containers are instantiated....
- Kubernetes
- Kubernetes, often abbreviated as K8s, is an open-source container orchestration platform originally designed by Google and now maintained by the Cloud Native...
- Kubernetes Security
- Kubernetes Security is the protection of cluster components, workloads, identities, network policies, and supply-chain paths in Kubernetes. Security teams use...
- LXC
- Linux Containers, a set of userspace tools for running multiple isolated Linux systems on one host.
- Moby
- The open-source project providing core container technology components associated with Docker and related tooling. In container culture, Moby represents the...
- Mount Point
- A directory in a file system hierarchy at which a separate file system, disk partition, or volume is attached and made accessible — for example, mounting an...
- Multi-Stage Build
- A Dockerfile technique that uses multiple `FROM` statements to create intermediate build stages — compiling code and installing dev dependencies in early...
- Open Container Initiative
- The standards body that maintains widely used specifications for container images and runtimes.
- Orchestration
- Orchestration is the automated coordination, configuration, and management of multiple services, containers, or infrastructure components so they function as a...
- Pod
- The smallest deployable unit in Kubernetes — a group of one or more containers that share the same network namespace (IP address and ports), storage volumes,...
- Podman
- An open-source container engine designed as an alternative to Docker, often emphasizing daemonless operation and close integration with Linux container...
- Portainer
- A management interface for containers, Docker, and Kubernetes environments aimed at simplifying operations through a web UI.
- Resource Limit
- A cap imposed by the operating system, container runtime, or platform on how much of a given resource (CPU, memory, file descriptors, processes, network...
- Runtime Security
- The monitoring and protection of applications, containers, hosts, or serverless workloads during execution. Runtime security focuses on what is actually...
- Shipping Container
- A playful phrase that leans on the literal meaning of containers while talking about software shipping and Docker-style deployment. In engineering slang, it...
- Skaffold
- A developer workflow tool for building, deploying, and iterating on Kubernetes applications locally and remotely.
- Swarm
- Docker Swarm — Docker's native container orchestration tool, offering simpler setup than Kubernetes at the cost of fewer features. The 'we don't need...
- Traefik
- A reverse proxy and ingress controller known for dynamic configuration in container and Kubernetes environments.
- Trivy
- A security scanner for container images, filesystems, repositories, and related software artifacts.
- Volume
- A persistent storage unit managed by a container runtime (such as Docker or Kubernetes) that exists independently of any single container's lifecycle, allowing...
- Volume Mount
- The act of attaching a volume or host directory to a specific path inside a container, making external storage accessible to the containerized application as...
Related Topics
- Infrastructure (19 terms in common)
- Devops (18 terms in common)
- Docker (7 terms in common)
- Operations (6 terms in common)
- Runtime (6 terms in common)
- Kubernetes (4 terms in common)
- Linux (4 terms in common)
- Slang (4 terms in common)
- Deployment (4 terms in common)
- Orchestration (4 terms in common)
- Storage (3 terms in common)
- Images (3 terms in common)
- Build Systems (2 terms in common)
- Debugging (2 terms in common)
- Networking (2 terms in common)
- Health Checks (2 terms in common)
- Cloud Security (2 terms in common)
- Lifecycle (2 terms in common)
- Open Source (2 terms in common)
- Hardening (2 terms in common)