Overview of containers
A container is a lightweight, standalone executable package that contains everything needed to run an application, including the code, runtime, libraries, and dependencies. Containers are designed to be easily portable between different computing environments, making them an ideal solution for modern application deployment. Everything at Google runs in containers, from Gmail to YouTube to Search. Development teams can now move quickly, distribute software efficiently, and operate at unprecedented scale thanks to containerization.
Containers come with security advantages inherent to their architecture:
- Containers are short-lived and frequently re-deployed
- Containers are intentionally immutable; a modified container is a default security alert
- Good security defaults are one-line changes; setting secure configurations is easy
- With isolation technologies, you can increase security without adding resources
Google invests massively in...