174
container
A process with its filesystem pinned. It is not a VM, and “works on my machine” is the image, not the laptop.
What is container?
A container image packages a process and its userspace. It shares the host kernel. It is smaller than a VM and less isolated. The image should be buildable from the repo, run as a non-root user, and not contain secrets.
Why does container matter when vibe coding?
Models write a Dockerfile that copies the world, runs as root, and depends on a floating base tag. Name the constraints.
How do you do container?
Pin the base. Multi-stage so the runtime image lacks the compiler. Non-root. No secrets in layers. One process. The same image runs in dev and prod.
How do you ask a model for container?
Containerize (service). Pin the base image. Multi-stage build. Run as non-root. Do not copy secrets into the image. One process. The dev and prod image is the same artifact.
What goes wrong with container?
A container that only runs if a volume has a hand-made config. Then the image is not the release. Put config in the environment.