The document discusses Docker containers and how they work. Docker containers isolate processes and their file systems to virtualize operating systems without running a full virtual machine. Containers use control groups to share resources and isolate compute and storage. Docker images contain the contents of containers and are built from Dockerfiles that define how to assemble images from layers. Images are stored in repositories that can be pulled from or pushed to public or private registries.

1. 2014-Dec-17 - Jerng
Bare Metal Box or VM
Linux
OSX or Windows
Boot2Docker
Linux Kernel
Vagrant, VirtualBox,
and BusyBox
(dockerd) Daemon
A
process
tree.
A changing
filesystem.
CONTROL GROUP 1
A
process
tree.
A changing
filesystem.
CONTROL GROUP 2
A
process
tree.
A changing
filesystem.
CONTROL GROUP n
These are Docker containers; like BSD jails; like VMs that share a kernel.A Docker repository contains
many images; images may be
tagged. The syntax is
repository/owner:tag.
Docker images
are immutable
filesystems.
docker run
docker commit
docker savedocker load Repository or Image .tar
file, with metadata.
docker export
docker import
Filesystem .tar file,
without metadata.
A Docker registry may host many repositories. Hub.docker.com is the public Docker
registry.
docker push
docker pull
docker build
A Dockerfile is a list of commands to build an
image.
Docker registries may call Dockerfiles from a Git
repository, for automated builds.
docker start
docker stop
This is like powering
on/off a machine.