liveBookmanning.com

What you will learn in Learn Docker in a Month of Lunches, Second Edition

by Elton Stoneman

Read it on liveBook Get the book at manning.com

Chapter by chapter

Concepts explained in this book

• DockerfileA Dockerfile is a text configuration file that specifies how to build a Docker container image.
• containerA container is an isolated software execution unit that packages an application with its dependencies for a compatible operating-system and processor platform.
• container imageA container image is a packaged filesystem and metadata bundle containing an application's content, dependencies, and instructions for starting it in a container.
• DockerDocker is a platform for building, distributing, and running applications in isolated software containers.
• docker-compose.ymlA Docker Compose file is a declarative configuration file that defines a multi-container application and its services.
• Docker ComposeDocker Compose is a Docker tool for defining and running multi-container applications from a declarative configuration file.
• configurationApplication configuration is the set of settings that controls an application's runtime behavior.
• environment variableAn environment variable is a named key/value setting supplied by an operating system or execution environment to configure a process.
• container registryA container registry is a service that stores and distributes container images.
• deployment pipelineA CI/CD pipeline is an automated sequence that builds, tests, packages, and delivers software through continuous integration and continuous delivery or deployment.
• Compose override fileA Compose override file is a Docker Compose configuration file that modifies or extends settings from another Compose file for a particular environment.
• base imageA base image is an existing container image that supplies the starting filesystem and layers for building another image.
• image layerAn image layer is an immutable filesystem change and associated data that forms part of a container image and can be shared by other images and containers.
• KubernetesKubernetes is an open-source platform for orchestrating and managing containerized workloads across computing resources.
• PrometheusPrometheus is an open-source monitoring system and time-series database that collects and queries numerical measurements.
• reverse proxyA reverse proxy is a server or service that receives client requests and forwards them to backend applications or services, often selecting a destination based on request attributes.
• health checkA health check is an automated test that determines whether an application is functioning correctly rather than merely having a running process.
• volumeA Docker volume is a Docker-managed storage unit that exists independently of containers and persists data across container lifecycles.
• multiarch container imageA multi-platform image is a container image reference that provides platform-specific variants for different operating systems and processor architectures.
• virtual networkA Docker network is a virtual network managed by Docker that enables communication between connected containers.
• Dockerfile instructionA Dockerfile instruction is a declarative directive that specifies a build action or image metadata.
• pipelineA workflow is a declarative automation definition that specifies jobs, triggers, and execution steps for a software delivery process.
• podA Pod is the smallest deployable unit in Kubernetes and encapsulates one or more containers sharing network and storage resources.
• monitoringA log record is a structured or unstructured event message describing activity or state in an application or system.
• asynchronous programmingAsynchronous messaging is a communication technique in which a sender and receiver exchange messages without requiring the receiver to process each message immediately.
• image sizeImage size is the amount of storage represented by a container image and its layers.
• build contextA build context is the directory and its contents supplied to Docker as input for building a container image.
• Compose serviceA Compose service is a named application component definition that specifies how Docker Compose creates and runs its container.
• sink nodeA subscriber is a messaging component that listens for and receives messages published to a subject.
• build cacheAn image layer cache is a build cache that stores previously generated image layers for reuse when their inputs have not changed.
• Azure Container InstancesAzure Container Instances is a Microsoft Azure service for running containers without managing virtual machines or an orchestration cluster.
• container logContainer logs are the streams of diagnostic and operational messages emitted by processes running in a container.
• .env fileAn environment file is a file containing environment-specific variable assignments for application configuration.
• copy instructionA COPY instruction is a Dockerfile directive that copies files or directories into the image filesystem.
• Azure CLIAzure CLI is Microsoft's command-line tool for creating and managing Azure resources and services.
• GrafanaGrafana is an open-source observability and visualization platform for querying data sources and presenting interactive dashboards.
• kubectlkubectl is the command-line tool for querying and managing Kubernetes clusters through the Kubernetes API.
• build stageA builder stage is a Dockerfile build stage that contains the tools and source files needed to compile an application.
• mount pointA volume mount makes a Docker-managed storage object available to a container for reading and writing data.
• NGINXNGINX is web server and reverse-proxy software distributed as a container image with multiple version and feature variants.
• image referenceAn image reference is a name that identifies a container image, optionally including a registry domain, repository, tag, or digest.
• YAMLYAML is a human-readable serialization format commonly used for configuration data.
• golden imageA golden image is an organization-maintained container image derived from an approved base image with standardized custom configuration.
• manifest listA manifest list is an image metadata structure that maps a multi-platform image reference to platform-specific image manifests.
• Kubernetes DeploymentA Deployment is a Kubernetes API resource that manages a set of Pods through a declarative Pod template and desired replica count.
• fluentdFluentd is an open-source unified logging layer that collects, processes, enriches, filters, and forwards log data.
• vulnerability scanningSecurity scanning is automated analysis of software or container images for known security vulnerabilities.
• GitHub ActionsGitHub Actions is a workflow automation service integrated with GitHub repositories for building, testing, and deploying software.
• upstream serviceAn upstream service is an application component that receives forwarded requests from a reverse proxy and generates their responses.
• port publishingA published port is a mapping that makes a container port accessible through a port on the host.
• dependency checkA dependency check is a test that determines whether an application dependency is available and functioning sufficiently for the application to operate.
• PromQLPromQL is Prometheus's query language for selecting, filtering, aggregating, and calculating time-series data.
• hardwareA CPU architecture is the defined instruction set and hardware organization that determines which processor-targeted software can execute.
• standard outputStandard output is the default output stream through which a process writes ordinary textual results or messages.
• performanceA metric is a quantitative measurement of a system, application, process, or outcome.
• container filesystemA container filesystem is the filesystem associated with a container and persisted as part of its container state.
• release repositoryA release repository is a container image repository that stores images approved for deployment to production.
• image variantAn image variant is a platform-specific version of a container image that contains the same application for a particular CPU architecture and operating system.
• run instructionThe RUN instruction executes a command while building a Docker image and commits its result to an image layer.
• bind mountA local bind mount makes a directory or file from the host filesystem available at a path in a container.
• 12-factor appThe 12-factor approach is a methodology for building portable, deployable applications with configuration separated from code and supplied through the runtime environment.
• dashboardA dashboard is a visual display that organizes queried measurements into panels for monitoring a system or application.
• label selectorA Kubernetes label selector is a query that identifies resources whose labels match specified criteria.
• queueA message queue technology is software that provides queues and related mechanisms for storing and delivering messages between application components.
• Windows Server Core imageWindows Server Core is a minimal Windows Server installation option that provides a reduced operating-system environment without the full graphical shell.
• cachingA cache is a temporary storage area containing previously retrieved data so that repeated requests can be served more quickly.
• secrets sectionA secrets section is a Docker Compose configuration block that declares secrets and their source files.
• isolationIsolation is the separation of applications or execution environments so that one cannot directly interfere with another.
• image labelAn image label is a key/value metadata item embedded in a container image and carried with that image when it is transferred.
• container breakoutA container breakout is an escape from an application's intended container isolation that allows code or commands to execute against the container or its host context.
• security hardeningSecurity hardening is the practice of reducing exploitable weaknesses by applying restrictive configuration and removing unnecessary capabilities.
• TrivyTrivy is an open-source security scanner for container images, source repositories, dependencies, and infrastructure configuration.
• image tagAn image tag is a human-readable name or label that identifies a container image reference.
• build farmA build farm is a collection of build machines with different execution environments or processor architectures for producing software artifacts.
• Azure Container AppsAzure Container Apps is a managed Microsoft Azure platform for deploying and operating containerized applications with features such as autoscaling, ingress, revisions, and integrated monitoring.
• counterA counter is a metric that increases over time and represents a cumulative count of events.
• gaugeA gauge is a metric whose value can increase or decrease to represent a current level or quantity.
• config commandThe Docker Compose config command validates Compose configuration files and outputs their merged configuration without deploying the application.
• containers as a serviceA managed container service is a provider-operated cloud service that runs containers while abstracting infrastructure provisioning and management.
• GitHub actionA GitHub Action is a reusable automation component that performs a step or operation within a GitHub Actions workflow.
• writable layerA writable layer is the container-specific filesystem layer that records new and modified files above read-only image layers.
• handlerA message handler is a software component that receives messages or events and performs processing in response.
• docker inspectdocker image inspect is a Docker CLI command that displays detailed metadata and configuration for a container image.
• cross-platform developmentMulti-platform support is the ability of software or its delivery process to operate across multiple operating-system and processor platforms.
• TLS terminationSSL termination is the process of ending an SSL or TLS connection at an intermediary such as a reverse proxy before forwarding the request internally.
• RESTA REST API is an HTTP interface that exposes resources and operations according to the principles of representational state transfer.
• continuous deploymentContinuous deployment is the practice of automatically packaging and delivering validated software for deployment.
• runnerA build agent is a machine or hosted worker that executes automated software build jobs.
• TraefikTraefik is an open-source reverse proxy and load balancer that dynamically configures routing from service metadata and runtime discovery.
• acr buildaz acr build is an Azure CLI command that submits a Docker image build to Azure Container Registry's managed build service.
• ACR taskAn ACR task is a managed Azure Container Registry build or automation job that executes image-related work in Azure.
• Microsoft Container RegistryAzure Container Registry is Microsoft's managed private registry service for storing, securing, building, and distributing container images.
• EFK stackThe EFK stack is a logging architecture composed of Elasticsearch for storage and search, Fluentd for collection and processing, and Kibana for exploration and visualization.
• Docker HubDocker Hub is a public registry and collaboration service for sharing container images and other containerized software.
• Cloud RunGoogle Cloud Run is a managed Google Cloud platform for running containerized applications without managing servers.
• archive patternThe archive pattern is a deployment pattern in which an application archive is downloaded, verified, extracted, and copied into a runtime image.
• filesystem deploymentFilesystem deployment is an application installation technique that places already-built application files directly into their target filesystem locations.
• Internet Information ServicesIIS is Microsoft's web server software for hosting websites and web applications on Windows.
• Log MonitorLog Monitor is a Microsoft console utility that collects application logs from configured Windows sources and writes them to standard output.
• MSIAn MSI installer is a Windows Installer package containing files and installation metadata for deploying software.
• Service MonitorService Monitor is a Microsoft console utility that starts and watches a Windows Service as a container entry process.
• Windows serviceA Windows Service is a background process managed by the Windows service-control infrastructure.
• multitiered configuration modelA multitiered configuration model combines default settings, file-based overrides, and environment variables with defined precedence between them.
• env_file propertyThe Compose env_file property specifies a text file whose key/value lines are loaded into a service container as environment variables.
• manifest fileA deployment manifest is a declarative file specifying the resources and configuration required to deploy software to an environment.
• legacy systemA legacy application is an existing software system built with older technologies or architectural assumptions and still relied upon for ongoing business operations.
• healthcheck instructionThe HEALTHCHECK instruction is a Dockerfile instruction that defines a command and scheduling parameters for testing an application's health in a container.
• Kubernetes APIThe Kubernetes API is the standardized interface for declaring, querying, and managing Kubernetes resources and application models.
• ingress objectIngress is the network routing layer that controls how external or internal traffic reaches an application service.
• container labelA container label is a key/value metadata attribute attached to a container through its configuration.
• dynamic configuration managementDynamic configuration is a configuration model in which routing and service settings are discovered or updated automatically while a system is running.
• entrypointA Traefik entrypoint is a named network entry point on which Traefik listens for external traffic.
• middlewareA Traefik middleware is a request-processing component that modifies or validates traffic before forwarding it to a service.
• routingA Traefik router is a routing rule that matches an incoming request and selects a target service.
• session affinityA sticky session is session affinity that routes repeated requests from a client to the same service instance when possible.
• build-share-run workflowThe build-share-run workflow is a container delivery process in which an application is packaged, published for reuse, and run by other users.
• KibanaKibana is a web interface for searching, exploring, visualizing, and dashboarding data stored in Elasticsearch.
• Artifact RegistryArtifact Registry is Google Cloud's managed service for storing and distributing software artifacts such as container images and packages.
• GCP projectA Google Cloud project is an administrative resource that groups cloud services, resources, permissions, and billing associations.
• GogsGogs is a lightweight, self-hosted web service for hosting and managing Git repositories.
• producerA publisher is a messaging component that sends messages to a queue or channel.
• project nameA project name is the identifier Docker Compose uses to group and name the resources belonging to an application deployment.
• .NET Framework.NET Framework is Microsoft's Windows-only application development and runtime framework.
• CrashLoopBackOffCrashLoopBackOff is a Kubernetes status indicating that a container repeatedly fails and restarts with increasing delays.
• kubectl applykubectl apply is a kubectl command that creates or updates Kubernetes resources from declarative configuration.
• kubectl port-forwardkubectl port-forward is a kubectl command that forwards local network traffic to a port on a Kubernetes Pod or other resource.
• labelA Kubernetes label is a key-value metadata pair attached to a resource for organization and selection.
• pod restartA Pod restart is Kubernetes behavior that replaces a terminated container in a Pod to restore the declared running state.
• pod specificationA Pod specification is the declarative configuration describing a Pod's metadata and the containers it should run.
• serviceA Kubernetes Service is a network abstraction that exposes selected Pods and routes traffic to them.
• BuildKitBuildKit is Docker's image-building engine for efficiently constructing container images from build definitions and contexts.
• dockerignoreA Docker build configuration file that specifies files and directories to exclude from the build context.
• event historyImage history is the ordered metadata describing the filesystem layers and build steps that comprise a Docker image.
• image optimizationImage optimization is the practice of reducing unnecessary content and construction overhead in container images.
• client-side toolA client-side tool is a management program that sends commands to a separate service through an API rather than implementing the managed runtime itself.
• depends_ondepends_on is a Docker Compose file property that declares startup dependencies between services.
• service scaleService scale is the number of container instances running for a Compose service.
• NATSNATS is a lightweight messaging system that supports publish-subscribe and other communication patterns for distributed applications.
• build infrastructureBuild infrastructure is the collection of services and systems that store source code, build software, and distribute build artifacts.
• centralized logging systemCentralized logging is a logging architecture in which logs from multiple applications or containers are collected and managed in a shared system.
• Docker named pipeA Docker named pipe is a Windows interprocess communication endpoint through which clients access the Docker API.
• docker.sockA Docker socket is a local interprocess communication endpoint through which clients access the Docker API on Linux.
• ElasticsearchElasticsearch is a distributed search and analytics engine for storing, searching, and analyzing structured and unstructured data.
• Elasticsearch indexAn Elasticsearch index is a named collection of documents that can be searched and queried as a unit.
• Fluentd logs driverThe Fluentd logging driver is a Docker logging driver that forwards container log output directly to a Fluentd service.
• Cloud Run jobA Cloud Run job is a managed container workload that executes in the background and is expected to complete.
• Cloud Run serviceA Cloud Run service is a managed container workload that receives network requests and serves traffic through a public endpoint.
• Google CloudGoogle Cloud is a public cloud platform providing hosted computing, storage, networking, and application services.
• staging repositoryA staging repository is a container image repository that temporarily stores images after initial validation and before release testing.
• liveness checkA liveness probe is a Kubernetes container probe that determines whether a container should be restarted.
• pod controllerA Pod controller is a Kubernetes control-loop component that maintains a specified set of Pods in their desired operational state.
• pod templateA Pod template is a declarative specification from which Kubernetes creates Pods.
• probeA container probe is a Kubernetes health test that evaluates a container using a network request, command, or other configured check.
• readiness checkA readiness probe is a Kubernetes container probe that determines whether a Pod should receive traffic from a Service.
• reconciliationA reconciliation loop is a control loop that repeatedly compares current system state with desired state and takes corrective action.
• replicaA replica is an independently running instance of a workload maintained to provide capacity or redundancy.
• end-to-end testingAn end-to-end test verifies an application workflow across its externally observable components to simulate real user interaction.
• configuration loader utilityA configuration loader utility is a startup program that transforms externally supplied settings into the configuration format and location required by an application.
• dacpacA DACPAC is a binary data-tier application package that contains the schema definition of a SQL Server database.
• schemaA database schema is the formal definition of a database's tables, relationships, constraints, indexes, and other structural objects.
• parallelismParallelism is the concurrent execution of multiple computational operations or data transfers.
• multi-layer imageA multi-layer image distributes its filesystem data across multiple image layers to enable concurrent layer transfer.
• daemon.jsondaemon.json is Docker Engine's JSON configuration file for daemon settings such as image storage and permitted insecure registries.
• insecure registryAn insecure registry is a container registry accessed over unencrypted HTTP rather than HTTPS.
• JenkinsfileA Jenkinsfile is a text file that defines the jobs or pipeline stages Jenkins executes for a project.
• copy-on-writeCopy-on-write is a storage technique that copies shared data into a writable location only when a modification is made.
• virtual filesystemA virtual filesystem is a software-provided representation of files and directories exposed to a running container.
• arg instructionAn ARG instruction is a Dockerfile directive that declares a build-time argument whose value is available only while an image is being built.
• message subjectA message subject is a string attached to a message to identify its type or routing category in a messaging system.
• YAML merge syntaxYAML merge syntax is a YAML mechanism for incorporating mappings from an anchored definition into another mapping.
• RedisRedis is an open-source in-memory data structure store that can function as a database, cache, and message broker.
• statefulnessA stateful application is an application whose behavior or future results depend on data retained from prior interactions or executions.
• configmapA ConfigMap is a Kubernetes API resource that stores non-sensitive configuration data as key-value pairs or text blocks.
• event-driven architectureAn event-driven architecture is a software design in which components publish events representing occurrences and other components react to those events.
• metric endpointA metrics endpoint is an interface that exposes the current measurements of a system or application in a machine-readable format.
• multi-platform buildA cross-platform build is a build process that produces software artifacts targeted at more than one operating-system or processor platform.
• docker rundocker run is a Docker CLI command that creates and starts a container from an image.
• multi-platform DockerfileA Dockerfile intended to build compatible image variants for multiple target platforms.
• entrypoint instructionThe ENTRYPOINT instruction specifies the executable or command that a container runs when started from an image.
• decouplingDecoupling is a design technique that separates communicating components so they do not depend directly on one another.
• docker loginThe docker login command authenticates the Docker client to a container registry.
• docker pushThe docker image push command uploads a local container image to a registry.
• named volumeA named volume is a Docker volume identified by an explicitly assigned name rather than an automatically generated identifier.
• volume flagThe volume flag is a Docker command-line option that mounts a volume at a specified container path.
• volume instructionThe VOLUME instruction is a Dockerfile directive that declares a directory as a mount point backed by a volume when a container is created.
• docker system dfdocker system df is a Docker CLI command that reports disk-space usage by Docker objects, including images and their shared layers.
• container platformA container platform provides capabilities for building, running, networking, and managing software containers.
• distributed systemA distributed system is a system whose components execute across multiple networked processes or computing environments.
• cloud migrationCloud migration is the process of moving applications, data, or infrastructure from existing environments to cloud infrastructure or services.
• Prometheus client libraryA Prometheus client library is a language-specific software library that records application metrics and exposes them in a format Prometheus can collect.
• runtime statisticA runtime metric is a measurement describing the activity and resource use of an application's execution runtime.
• pull modelA pull model is a data-collection approach in which a monitoring system periodically fetches data from monitored systems.
• resource tagA metric label is a named metadata field attached to a metric value to distinguish dimensions of the measured data.
• scrapingScraping is the periodic retrieval of monitoring data from an exposed endpoint.
• sequenceA time series is an ordered sequence of values recorded with timestamps.
• Prometheus exposition formatPrometheus format is a text-based exposition format in which named metrics are represented with values, help text, and data types.
• exited stateAn exited state is the condition of a container whose main application process has ended and is no longer running.
• image cacheAn image cache is Docker Engine's local storage of container image layers for reuse by images and containers.
• detached modeDetached mode runs a container in the background without attaching the user's terminal to it.
• release-level settingA release-level setting is an application configuration value packaged into a released container image and kept consistent across environments for that release.
• log rotationLog rotation is the practice of limiting log-file size by switching to new files and retaining or overwriting older files according to a configured policy.
• standard errorStandard error is the conventional process stream for diagnostic and error output.
• log relayA log relay is a process that reads application log records from one sink and writes them to stdout.
• logging levelA logging level specifies the severity threshold and amount of diagnostic information an application records.
• batch scriptingA batch script is a text file containing commands for execution by a command interpreter, especially on Windows.
• CI/CD serverA build server is a server or online service that automatically builds software when source changes are pushed.
• containerized ciContainerized CI is continuous integration in which build and test environments are provided by containers.
• final stageThe stage whose filesystem becomes the contents of the output Docker image.
• test stageA multi-stage Dockerfile stage that runs tests against artifacts produced by an earlier stage.
• cloud computingCloud computing is the on-demand delivery of computing resources and services over a network, typically with usage-based provisioning.
• path-based routingPath-based routing directs requests to different backend services according to the request URL path.
• self-signed certificateA self-signed certificate is a digital certificate whose signature is produced by the same entity identified by the certificate.
• certificateA digital certificate binds a domain identity to a cryptographic public key for authenticating a network endpoint.
• TLSTLS is a cryptographic protocol that provides encrypted and authenticated communication over a network.
• configuration apiA configuration API is an application endpoint that exposes selected runtime configuration settings to authorized clients.
• hierarchical configuration modelA hierarchical configuration model combines settings from multiple sources in a defined precedence order, allowing more specific sources to override defaults.
• smoke testA smoke test is a short, focused test that checks whether a software build or deployment performs its essential functions.
• staging imageA staging image is a container image stored for validation before it is promoted for production deployment.
• ViperViper is a Go configuration library that loads settings from files and environment variables with precedence and override support.
• re-platformingReplatforming is a migration strategy that changes the platform on which an application runs while preserving the application itself.
• Compose specificationThe Compose specification is the declarative standard for defining multi-container applications and their services, configuration, and relationships.
• Jenkins jobA Jenkins job is a configured Jenkins task that executes specified automation, such as a build or pipeline.
• distributed file systemA distributed filesystem stores or exposes data across networked machines while presenting filesystem access to clients.
• distributed storageA distributed storage system stores and provides access to data across multiple networked storage resources.
• clusteringA cluster is a group of machines managed together as a single computing system.
• control planeA Kubernetes control plane is the set of management components that maintain cluster state and coordinate workloads.
• k3dk3d is a lightweight command-line tool for running k3s Kubernetes clusters inside Docker containers.
• managed Kubernetes serviceA managed Kubernetes service is a provider-operated offering that runs Kubernetes control-plane infrastructure for customers.
• build nodeA build node is a Docker Engine endpoint assigned to perform image-building work in a Buildx builder.
• BuildxBuildx is Docker's extended build client for building container images with advanced features including multi-platform builds.
• Docker contextA Docker context is a Docker CLI configuration that specifies the endpoint and connection details for a Docker Engine.
• appsettings.jsonappsettings.json is a .NET configuration file conventionally containing default application settings for all environments.
• emulationEmulation is the software reproduction of another processor or machine environment so that software built for it can execute on the host.
• virtual machineA virtual machine is a software-defined computer that emulates hardware, runs its own operating system, and provides an isolated environment for applications.
• host headerA host header is an HTTP request header that identifies the destination domain or host requested by a client.
• docker manifest commandA Docker manifest command is a Docker CLI subcommand for creating, inspecting, or pushing image manifests and manifest lists.
• Docker CLIDocker CLI is the command-line interface for interacting with Docker.
• PostgreSQLPostgres is an open-source relational database management system.
• SQLiteSQLite is an embedded relational database engine that stores a database in a local file.
• vulnerabilityA vulnerability is a weakness in software that can be exploited to cause unintended or insecure behavior.
• proxy_cache_use_staleproxy_cache_use_stale is an NGINX configuration setting that permits serving cached responses when they are stale and specified upstream conditions occur.
• stale dataA stale cache is cached content whose configured freshness lifetime has expired.
• portabilityPortability is the ability of software to run consistently across different deployment environments.
• deployment artifactA deployable artifact is a tested software package or image that is ready to be deployed.
• layer sizeLayer size is the amount of storage represented by an individual container-image layer.
• environment-level settingAn environment-level setting is configuration whose value varies between deployment environments such as development, testing, and production.
• feature-level settingA feature-level setting is configuration that changes application behavior between releases or runtime contexts.
• node-confignode-config is a Node.js configuration library that loads settings from hierarchical files and environment variables with override precedence.
• domain name systemDNS is the Domain Name System, a distributed naming system that resolves domain names to network addresses.
• load balancingLoad balancing is the distribution of requests or traffic across multiple service instances.
• service discoveryService discovery is the technique of dynamically locating a service and obtaining the network address needed to communicate with it.
• application stageAn application stage is a Dockerfile build stage that assembles the runtime image for an application.
• minimal base imageA minimal base image is a base container image containing only the operating-system files and runtime components needed by an application.
• native executableA native binary is an executable program compiled for a specific operating-system and processor platform without requiring a separate language runtime.
• multi-container applicationA multi-container application is an application whose components run in multiple coordinated containers.
• log filteringLog filtering is the selective retention, routing, or suppression of log records according to their attributes or severity.
• match blockA match block is a Fluentd configuration block that selects records by tag or pattern and specifies their processing or destination.
• metadata fieldA metadata field is a named attribute containing descriptive information about a log record, such as its application, service, or image.
• package list cacheA package list cache is locally stored package metadata maintained by a package manager for resolving and installing software.

These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.