Glossary / Docker

Image

An image is a set of read-only filesystem layers stacked on top of each other, plus metadata (entrypoint, exposed ports, env defaults). Running `docker run` on an image creates a container: the image stays untouched, and a thin writable layer is added on top for that container's own changes.