I would like to fill the missing part here between docker images and containers. Docker uses a union file system (UFS) for containers, which allows multiple filesystems to be mounted in a hierarchy and to appear as a single filesystem. The filesystem from the image has been mounted as a read-only layer, and any changes to the running container are made to a read-write layer mounted on top of this. Because of this, Docker only has to look at the topmost read-write layer to find the changes made to the running system.

映像的实例称为容器。你有一个图像，它是你描述的一组图层。如果启动这个映像，就有了这个映像的运行容器。同一个映像可以有多个正在运行的容器。

你可以用docker images看到你所有的图像，而你可以用docker ps看到你正在运行的容器(你可以用docker ps -a看到所有的容器)。

因此，映像的运行实例就是一个容器。

A docker image or a container image in general is a software package which wraps your application executable, dependencies, configurations and application runtime into a secure and immutable unit. When I am saying application executable it differs from application to application. For example if it is a java application it would a jar file, for node application may be a js file. Similarly the application runtime depends on your application itself. For java application it will be JRE, for node application it is node binaries.

您可以根据映像清单文件中提供的说明构建映像。Dockerfile)。构建映像后，可以将其存储在本地或一些容器映像存储库(如hub.docker.com)中。

当您希望将映像作为应用程序工作负载运行时，您可以启动一个需要映像的容器。容器是映像的运行时实例。

要构建一个映像，存储它并将其作为容器运行，你需要一个名为容器运行时的软件，比如Docker。这些容器运行时符合Open container Initiative为映像创建和容器运行提供的标准。

Dockerfile→(Build)→Image→(Run)→Container。

Dockerfile:包含一组Docker指令，以您喜欢的方式配置您的操作系统，并安装/配置所有软件。 图片:编译好的Dockerfile。节省了每次需要运行容器时重新构建Dockerfile的时间。这是一种隐藏供应代码的方法。 容器:虚拟操作系统本身。您可以ssh进入其中并运行任何命令，就像它是一个真实的环境一样。您可以从同一个映像运行1000多个容器。

Docker容器正在运行一个映像的实例。你可以将图像与程序关联起来，将容器与进程关联起来:)

An image is like a class and container is like an object that class and so you can have an infinite number of containers behaving like the image. A class is a blueprint which isnt doing anything on its own. You have to create instances of the object un your program to do anything meaningful. And so is the case with an image and a container. You define your image and then create containers running that image. It isnt exactly similar because object is an instance of a class whereas a container is something like an empty hollow place and you use the image to build up a running host with exactly what the image says