Containers: podman/docker run, images, port publishing, volumes, logs, inspect

A container is a process, or group of processes, that runs isolated from the rest of the system while sharing the host's kernel. Isolation comes from kernel namespaces (separate views of processes, network, mounts and hostnames) and cgroups (control groups, which limit CPU and memory). Because there is no guest operating system to boot, containers start in seconds and use far fewer resources than virtual machines. Linux+ expects you to run and manage them with Docker or Podman.