Platform & DevOps·Packaging: containers and images
the process thinks it has its own machine, and on the host it is one ordinary PID among hundreds.
Container
Also calledLinux container, containerised process
A normal process on a shared kernel, given a private view of the filesystem, the network and the process table, and capped in what it may consume. There is no virtual machine and no boundary you could point at — the isolation is a set of kernel features applied to something that would otherwise be an ordinary program. That is why containers start in milliseconds and why a kernel bug is a much more serious event here than it is between two virtual machines.