Containers And Runtimes

Kubernetes does not make containers magical. It standardizes how images become processes under resource and security constraints.

Topics

  • Container Images - An image is a supply chain artifact. Kubernetes can pull it, but you still own versioning, provenance, size, and rollback behavior.
  • Container Runtime And CRI - kubelet does not run containers directly. It talks through the Container Runtime Interface to a runtime such as containerd.
  • RuntimeClass And Isolation - RuntimeClass lets a Pod ask for a different execution environment without changing the application manifest shape.

Editorial Notes

  • Keep the official docs as the citation layer.
  • Keep this lab opinionated around homelab operations: verification, failure modes, and practical boundaries.
  • Avoid copying upstream prose; cite it, then explain the operating model in our own language.

Sources

  • Containers - source path: content/en/docs/concepts/containers/_index.md, commit 8cc9e19b8eec8d5cf49eacd66f86a81648edb1a0.
  • Images - source path: content/en/docs/concepts/containers/images.md, commit 8cc9e19b8eec8d5cf49eacd66f86a81648edb1a0.
  • Container Runtimes - source path: content/en/docs/setup/production-environment/container-runtimes.md, commit 8cc9e19b8eec8d5cf49eacd66f86a81648edb1a0.
  • Kubernetes documentation is licensed under CC BY 4.0; these notes are original commentary and link back to the official source.

3 items under this folder.