Today, many applications are available via docker containers – in most cases, they help to avoid dependency hell while recompiling or trying to run a single binary. What is the container? Simply put, it is an isolated set of processes, which don’t have any access to other processes and are limited to access full network, full file system, devices, etc. It is similar to a virtual machine, but there is no emulation; all processes are real, and from the "top level," you can see all of them.