What is Docker?
Learn what Docker is, how containers isolate apps using the host kernel, and why it solves environment inconsistency — with a DevOps interview answer.
Expected Interview Answer
Docker is a platform that packages an application together with its dependencies, libraries, and runtime into a lightweight, portable unit called a container, which runs consistently across any environment.
Docker uses OS-level virtualization: containers share the host kernel but are isolated from each other via Linux namespaces (process, network, filesystem) and cgroups (resource limits), so they start in milliseconds and use far less overhead than a full virtual machine. A Dockerfile declares the steps to build an image, and the Docker engine builds, ships, and runs that image as a container on any host with Docker installed. Docker Hub and private registries let teams store and distribute images, while Docker Compose can orchestrate multiple related containers for local development. This "build once, run anywhere" model eliminates the classic "it works on my machine" problem.
- Consistent environments from laptop to production
- Lightweight and fast compared to virtual machines
- Simplifies dependency management and packaging
- Enables microservices and easy horizontal scaling
AI Mentor Explanation
Docker is like a pre-packed cricket kit bag that a touring player carries — bat, pads, gloves, spikes, all exactly tuned to that player, ready to use at any ground worldwide. Wherever the team lands, the player does not borrow local gear that might not fit; they unpack their own kit and play immediately. The stadium provides the pitch and crowd (the host machine), but the player brings everything else bundled together. This is why a bowler’s run-up feels identical whether the match is in Mumbai or Melbourne.
Step-by-Step Explanation
Step 1
Write a Dockerfile
Declare the base image, dependencies, files to copy, and the startup command.
Step 2
Build an image
Docker reads the Dockerfile and produces a layered, immutable image.
Step 3
Run a container
Docker starts an isolated process from the image using kernel namespaces and cgroups.
Step 4
Ship and scale
Push the image to a registry and run identical containers on any host or orchestrator.
What Interviewer Expects
- Understanding that containers share the host kernel unlike VMs
- Awareness of images vs containers as blueprint vs instance
- Knowledge of Dockerfile, registry, and Docker Compose roles
- Ability to explain why Docker solves environment inconsistency
Common Mistakes
- Calling Docker a virtual machine technology
- Confusing an image with a running container
- Forgetting that containers are ephemeral by default
- Not mentioning namespaces and cgroups as the isolation mechanism
Best Answer (HR Friendly)
“Docker lets us package an application with everything it needs to run into one lightweight unit called a container. That means the app behaves exactly the same on a developer laptop, a test server, or production, so we avoid the classic "it worked on my machine" problem and can ship faster and more reliably.”
Code Example
# Build an image from a Dockerfile
docker build -t myapp:1.0 .
# Run a container from that image
docker run -d -p 3000:3000 --name myapp-container myapp:1.0
# List running containers
docker ps
# View logs
docker logs -f myapp-containerFollow-up Questions
- How is Docker different from a virtual machine?
- What is the difference between an image and a container?
- What happens to data when a container stops?
- How do you reduce Docker image size?
MCQ Practice
1. What isolation mechanism does Docker primarily rely on?
Docker containers share the host kernel and are isolated using namespaces and cgroups, unlike VMs which run a full guest OS.
2. What file defines how a Docker image is built?
A Dockerfile contains the instructions Docker uses to assemble an image layer by layer.
3. Why are containers generally faster to start than virtual machines?
Since containers reuse the host kernel and skip booting a separate OS, they start in milliseconds compared to a VM.
Flash Cards
What is Docker? — A platform for packaging apps with their dependencies into portable, isolated containers.
What isolates a container? — Linux namespaces and cgroups on the shared host kernel.
What builds a Docker image? — A Dockerfile, processed via docker build.
Main Docker benefit? — Consistent behavior across environments, eliminating "works on my machine" issues.