Understand the concept
A container packages an application with its dependencies while sharing the host kernel. A VM runs a guest operating system with virtualized hardware.
Containers are convenient for service isolation and repeatable deployment, but need ongoing patching and appropriate privileges. Never assume they provide identical isolation to a VM.
TRY IT YOURSELF
Practice task
Compare the layers in a container and a VM diagram; identify where the operating system kernel lives.
CHECK YOUR UNDERSTANDING