In this section
Box types
Six constructors, each tuned for one job. Start here — the type decides most of the rest.
Lifecycle
Created, running, stopped, removed — and what survives each transition.
Compute resources
CPU, memory, and disk, so a workload is neither starved nor wasteful.
Environment
Variables, run user, and working directory inside the box.
Volumes
Mount a host directory so both sides read and write the same files.
Network access
Expose a service to the host, and bound what the box can reach.
Secrets and security
Deliver credentials without the sandbox seeing them; tighten isolation.
Snapshots
Save disk state, clone a box, or pack one into an archive.