[symfrog]

The key concept to understand is that containers are just regular operating system processes with additional isolation.

Most people are familiar with memory isolation between processes. The use of further isolation mechanisms for the filesystem, I/O etc. is generally termed a container [1].

Kubernetes adds an orchestration layer on top of containers to manage processes running across different operating system instances.

[1] https://jvns.ca/blog/2016/10/10/what-even-is-a-container