Container Runtime

A container runtime is the software component that actually creates and runs containers from an OCI image. It manages namespaces, cgroups, mount points, capabilities, and the container process lifecycle. Higher-level tools (Docker, Kubernetes) delegate the final "run this container" step to a runtime.

Two levels of runtime

  • High-level runtime. Pulls images, manages the local image store and…
Image Layer

An image layer is one immutable filesystem diff that, when stacked with the layers above and below it, forms a complete container image. Each Dockerfile instruction (FROM, COPY, RUN, ADD) typically produces one layer. Layers are content-addressable: identical layers are stored once and shared across images.

How layers compose

An image is described by a manifest: an ordered list of layer…

Podman is an open-source container engine compatible with the Docker CLI but architected without a long-running root daemon. Containers run as a regular user, in a rootless namespace, with a pod abstraction borrowed from Kubernetes. Podman is the default container engine on Red Hat Enterprise Linux and Fedora.

How it differs from Docker

  • Daemonless. No central dockerd service; each podman…

Docker Compose is a tool for defining and running multi-container applications on a single host using a declarative YAML file. It is the standard way to spin up a local development environment with a database, a cache, the application server, and any other supporting services in one command.

How it works

A docker-compose.yml (or compose.yaml) file declares services, networks, volumes, and…

BuildKit is the modern build backend for Docker and the OCI ecosystem. It replaces the original Docker builder with a concurrent, cache-aware engine that builds OCI images from Dockerfiles much faster and with finer control.

Key capabilities

  • Parallel build graph. Independent stages and instructions run concurrently rather than strictly top-to-bottom.
  • Granular caching. Layer caches keyed…

containerd is an industry-standard container runtime daemon that manages the complete container lifecycle on a host: image pull and storage, container execution, snapshotting, and networking. It is the runtime that Kubernetes, Docker, and most container platforms call underneath.

How it fits

Container tooling is typically layered. Docker and Kubernetes are high-level interfaces; they delegate…

Page 1