Glossary / General

Container runtime

The runtime (containerd, CRI-O) is what pulls images, sets up namespaces and cgroups, and starts the container process. Docker itself is a higher-level toolset that historically shipped with containerd underneath; Kubernetes talks to a runtime through the CRI (Container Runtime Interface).