First, these terms mean the same in the docker world: Image, Docker Image, container image and OCI (Open Container Initiative) image. Build time vs Run Time In a typical production cloud deployment, your registry and machines sit in the cloud.While DockerHub is the default registry, there are many options with cloud providers.With the simple case…
All posts in docker
Why Docker? Isolation and Reproducible Builds (Sanity)
Motivation for Isolation Why isolate? Let’s consider two core concepts of a computer: Resources and Access A computer has resources like RAM, CPU that allow programs to compute and complete. These programs have access to files in your file system and executable commands. Each program has difference privileges – program A may write to the…
Before Docker
Imagine a fresh linux installation. You may want to run a program.A program is a file on a disk. A process is a running instance of that program. Why do we want isolation?Security, Fault containment, Multi-tenancy Step 0: chroot: first steps towards IsolationOne of the oldest isolation tools in Linux is chroot, which changes the…
Install nginx locally with docker
Step: Download docker desktop Step: install nginx with “pull” and “run” Key problem: where is nginx serving? “80/tcp” Step: forward host machine requests to container “0.0.0.0:80->80/tcp”