Docker glossary

Every Docker word in this course, in plain words.

.dockerignore

A list of files to leave at home. They are never sent to the build.

In BM lessons: .dockerignore: Senarai fail yang ditinggalkan di rumah. Ia tidak dihantar ke build.

.env file

A file next to compose.yaml with lines like DB_PASSWORD=devpass. Keep it out of Git.

In BM lessons: fail .env: Fail di sebelah compose.yaml dengan baris seperti DB_PASSWORD=devpass. Jangan masukkan ke Git.

access token

A spare key for one job. Use it instead of your password, and cancel it if it leaks.

In BM lessons: token akses: Kunci ganti untuk satu kerja. Guna ia, bukan kata laluan, dan batalkan jika bocor.

base image

The ready-made pack your recipe starts from. It is the FROM line.

In BM lessons: image asas: Pek siap yang resepi anda mula guna. Itulah baris FROM.

bind mount

Your own shelf: a folder on your laptop, opened inside the container. Edits show up at once.

In BM lessons: bind mount: Rak anda sendiri: folder di laptop yang dibuka dalam container. Suntingan terus nampak.

build argument (ARG)

A setting used only while baking. It is not kept in the running container.

In BM lessons: argumen binaan (ARG): Tetapan yang dipakai semasa membakar sahaja. Ia tiada dalam container yang berjalan.

build cache

Layers kept from the last bake. A step that did not change is reused, not baked again.

In BM lessons: cache binaan: Layer yang disimpan dari bakar lepas. Langkah yang tak berubah diguna semula.

build context

The folder you send to the kitchen when you build. COPY can only take from it.

In BM lessons: konteks binaan: Folder yang dihantar ke dapur semasa build. COPY hanya boleh ambil dari situ.

build secret

A key lent to one RUN step only. It never lands in a layer.

In BM lessons: rahsia binaan: Kunci yang dipinjamkan kepada satu langkah RUN sahaja. Ia tidak masuk ke dalam layer.

cache mount

A pantry shelf BuildKit keeps between bakes, for downloads. It is not in the image.

In BM lessons: cache mount: Rak dapur yang BuildKit simpan antara bakar, untuk muat turun. Ia tiada dalam image.

capability

One special root power, like changing who owns a file. Drop the ones your app never uses.

In BM lessons: capability: Satu kuasa khas root, contohnya tukar pemilik fail. Buang yang aplikasi anda tak guna.

cgroup

A portion limit: how much memory and CPU, and how many processes, a container may use.

In BM lessons: cgroup: Had catuan: berapa banyak memori, CPU dan proses yang container boleh guna.

client

The part you talk to: the docker command. It takes your order to the engine.

In BM lessons: client: Bahagian yang anda guna: arahan docker. Ia hantar pesanan anda kepada enjin.

Compose

A set meal: start many containers together with one command.

In BM lessons: Compose: Hidupkan banyak container serentak dengan satu arahan.

compose watch

Watches your files and copies, restarts or rebuilds a service when you save.

In BM lessons: compose watch: Perhati fail anda dan salin, mula semula atau bina semula service bila anda simpan.

container

A sealed lunchbox that holds your app and everything it needs.

In BM lessons: container: Bekas bertutup yang bawa aplikasi dan semua keperluannya.

container DNS

Docker's phone book on your own network. Say a container's name, get its address.

In BM lessons: container DNS: Buku telefon Docker dalam rangkaian sendiri. Sebut nama container, dapat alamatnya.

containerd

The kitchen manager: it keeps images and starts and watches containers. Docker and Kubernetes both use it.

In BM lessons: containerd: Pengurus dapur: simpan image, mulakan dan jaga container. Docker dan Kubernetes sama-sama gunanya.

daemon

A program that waits in the background for work. Docker's daemon is called dockerd.

In BM lessons: daemon: Program yang menunggu kerja di belakang tabir. Daemon Docker bernama dockerd.

depends_on

Who waits for whom. With condition: service_healthy, a dish waits until the other passes its health check.

In BM lessons: depends_on: Siapa tunggu siapa. Dengan condition: service_healthy, satu hidangan tunggu sampai yang lain lulus health check.

detached (-d)

The container runs in the background, like a rice cooker: press start, walk away.

In BM lessons: detached (-d): Container berjalan di belakang, macam periuk nasi: tekan, kemudian tinggalkan.

digest

An image's fingerprint (sha256:…), made from every byte inside. It never moves, unlike a tag.

In BM lessons: digest: Cap jari image (sha256:…), dibuat daripada setiap bait di dalamnya. Ia tak pernah berubah, tak macam tag.

distroless

A base with only what the app needs to run. No shell, no package manager.

In BM lessons: distroless: Image asas yang ada apa aplikasi perlu sahaja. Tiada shell, tiada pengurus pakej.

DNS

The phone book of the network. It turns a name into an IP address.

In BM lessons: DNS: Buku telefon rangkaian. Ia tukar nama kepada alamat IP.

Docker Desktop

A kitchen kit in one app: Docker Engine, tools and a dashboard. Free for personal use and small businesses.

In BM lessons: Docker Desktop: Set dapur dalam satu aplikasi: Docker Engine, alatan dan papan pemuka. Percuma untuk kegunaan peribadi dan bisnes kecil.

Docker Engine

The cook in the back: the free, open-source program that runs your containers.

In BM lessons: Docker Engine: Tukang masak di belakang: program percuma dan sumber terbuka yang jalankan container anda.

Docker Hub

The biggest public shop freezer for images (docker.io). Docker uses it by default.

In BM lessons: Docker Hub: Peti sejuk kedai awam terbesar untuk image (docker.io). Docker guna ini secara lalai.

Docker Official Image

A trusted image Docker curates and keeps updated, like nginx or postgres. No user name in front.

In BM lessons: Docker Official Image: Image dipercayai yang Docker pilih dan kemas kini, contohnya nginx atau postgres. Tiada nama pengguna di depan.

Dockerfile

The recipe: step-by-step lines that make an image.

In BM lessons: Dockerfile: Resepi untuk buat image.

ENTRYPOINT

The fixed command an image always runs. Words you add go after it.

In BM lessons: ENTRYPOINT: Arahan tetap yang image sentiasa jalankan. Perkataan tambahan anda masuk selepasnya.

env file

A settings card: one NAME=value per line, handed over with --env-file.

In BM lessons: fail env: Kad tetapan: satu NAMA=nilai setiap baris, diberi dengan --env-file.

environment variable

A sticky note on the kitchen wall: a setting every program can read, like CHEF=Kancil.

In BM lessons: environment variable (pemboleh ubah persekitaran): Nota lekat di dinding dapur: tetapan yang setiap program boleh baca, contohnya CHEF=Kancil.

exit code

The number a program leaves when it ends. 0 means all good. Anything else means trouble.

In BM lessons: exit code (kod keluar): Nombor yang program tinggalkan bila ia tamat. 0 bermaksud semua okey. Nombor lain bermaksud ada masalah.

HEALTHCHECK

A small test Docker runs again and again: is the app still answering?

In BM lessons: HEALTHCHECK: Ujian kecil yang Docker jalankan berulang kali: aplikasi masih menjawab?

HTTP status code

The counter's reply in three digits: 200 means here you go, 404 means not on the menu.

In BM lessons: HTTP status code (kod status HTTP): Jawapan kaunter dalam tiga digit: 200 bermaksud nah, ambil; 404 bermaksud tiada dalam menu.

image

A frozen meal pack you can copy again and again. Containers start from it.

In BM lessons: image: Pek beku yang boleh disalin berkali-kali; templat untuk container.

interpolation

Blanks like ${DB_PASSWORD} in compose.yaml that Compose fills in from your shell or a .env file.

In BM lessons: interpolation: Tempat kosong seperti ${DB_PASSWORD} dalam compose.yaml yang Compose isi dari shell atau fail .env.

IP address

A computer's street address on a network, like 192.168.1.20.

In BM lessons: IP address (alamat IP): Alamat jalan sesebuah komputer dalam rangkaian, contohnya 192.168.1.20.

kernel

The heart of the operating system. It runs every program. Containers share the laptop's kernel.

In BM lessons: kernel: Jantung sistem pengendalian. Ia jalankan setiap program. Container berkongsi kernel laptop.

kernel

The kitchen's one stove: the core of Linux. Every container on a machine cooks on the same kernel.

In BM lessons: kernel: Dapur gas utama Linux; semua container dalam satu mesin guna kernel yang sama.

label

A sticker on the pack with a fact, like its version or source code link.

In BM lessons: label: Pelekat pada pek dengan satu fakta, contohnya versi atau pautan kod sumber.

latest

Just the default tag name. Its makers can move it to a new version any day.

In BM lessons: latest: Hanya nama tag lalai. Pembuatnya boleh alihkan ke versi baru bila-bila masa.

layer

One layer of kek lapis. Change one, and every layer above it is baked again.

In BM lessons: layer (lapisan): Satu lapisan image; tukar satu, lapisan di atasnya dibuat semula.

life cycle

The states a container moves through: created, running, paused, exited, removed.

In BM lessons: kitaran hidup: Keadaan yang container lalui: created, running, paused, exited, removed.

Linux VM (Docker Desktop)

The small Linux computer Docker Desktop runs on a Mac or PC, because containers need a Linux kernel.

In BM lessons: VM Linux (Docker Desktop): Komputer Linux kecil yang Docker Desktop jalankan pada Mac atau PC, kerana container perlukan kernel Linux.

localhost

This computer itself. Its address is 127.0.0.1.

In BM lessons: localhost: Komputer ini sendiri. Alamatnya 127.0.0.1.

logs

Everything a container printed while it worked. Read them with docker logs.

In BM lessons: log: Semua yang container paparkan semasa bekerja. Baca dengan docker logs.

multi-stage build

Cook in one stage, pack in another. Only the finished dish goes in the final image.

In BM lessons: binaan berbilang peringkat: Masak di satu peringkat, bungkus di peringkat lain. Hanya hidangan siap masuk image akhir.

namespace (Linux)

Blinkers for a process: it sees only its own processes, network, files or hostname. Not a Kubernetes namespace.

In BM lessons: namespace (Linux): Penutup mata untuk proses: ia nampak proses, rangkaian, fail atau hostname sendiri sahaja. Bukan namespace Kubernetes.

nesting

A box inside a box. In YAML, two more spaces put a line inside the line above.

In BM lessons: nesting (bersarang): Kotak di dalam kotak. Dalam YAML, dua ruang lagi letak baris itu di dalam baris atasnya.

network (your own)

A phone line you make with docker network create. Containers on it call each other by name.

In BM lessons: network (rangkaian sendiri): Talian telefon yang anda buat dengan docker network create. Container di atasnya boleh panggil satu sama lain ikut nama.

non-root user

A normal user with few rights. If someone breaks in, they can do less.

In BM lessons: pengguna bukan root: Pengguna biasa dengan hak yang sedikit. Jika orang menceroboh, mereka boleh buat lebih sedikit.

OCI

Open Container Initiative: shared rules for images and for running them, so any runtime can cook any pack.

In BM lessons: OCI: Open Container Initiative: peraturan bersama untuk image dan cara menjalankannya, supaya mana-mana runtime boleh guna.

overlay filesystem

Read-only image layers with one thin writable sheet on top for each container. Many containers share one image.

In BM lessons: overlay filesystem: Lapisan image baca sahaja, dengan satu plastik nipis boleh tulis di atas untuk setiap container.

override file

A second compose file laid on top of the first. compose.override.yaml loads by itself; others need -f.

In BM lessons: fail override: Fail compose kedua yang diletak atas fail pertama. compose.override.yaml dibaca sendiri; yang lain perlukan -f.

path

A file's full address, from the top folder down: /home/you/kitchen/menu.txt.

In BM lessons: path (laluan): Alamat penuh sesuatu fail, dari folder paling atas: /home/you/kitchen/menu.txt.

permissions

Who may read (r), change (w) or run (x) a file. ls -l shows them.

In BM lessons: permissions (kebenaran): Siapa boleh baca (r), ubah (w) atau jalankan (x) sesuatu fail. ls -l menunjukkannya.

platform

The OS and CPU type an image is built for, like linux/amd64 or linux/arm64.

In BM lessons: platform: Jenis OS dan CPU yang image dibina untuknya, contohnya linux/amd64 atau linux/arm64.

Podman

Another container engine. It takes the same orders as Docker, without a daemon.

In BM lessons: Podman: Satu lagi enjin container. Ia terima arahan yang sama macam Docker, tanpa daemon.

port

A numbered hatch on a computer. Each app waits for orders at its own number, like 8080.

In BM lessons: port: Tingkap bernombor pada komputer. Setiap aplikasi tunggu pesanan di nombornya sendiri, contohnya 8080.

port mapping

The order hatch: a door from a port on your computer to a port in the container.

In BM lessons: port mapping: Tingkap pesanan dari komputer anda ke container.

process

A program that is running right now. Each one has a number, its PID.

In BM lessons: process (proses): Program yang sedang berjalan. Setiap satu ada nombor, iaitu PID.

profile

A side dish: a service that starts only when you ask, with --profile or by its name.

In BM lessons: profile: Lauk tambahan: service yang hidup hanya bila diminta, dengan --profile atau ikut namanya.

project

One set meal on the table. Its name comes from the folder, so containers are called kedai-kancil-web-1.

In BM lessons: projek: Satu set hidangan atas meja. Namanya dari nama folder, jadi container bernama kedai-kancil-web-1.

prune

Sweep away everything unused in one go. It asks first, and there is no undo.

In BM lessons: prune: Sapu semua yang tak digunakan sekali gus. Ia tanya dulu, dan tak boleh dibatalkan.

pull

Fetch an image from a registry, like taking a meal pack out of the shop freezer.

In BM lessons: pull (tarik): Ambil image dari registry, macam ambil pek beku dari peti sejuk kedai.

pull limit

How many images Docker Hub lets you pull every 6 hours. Logging in raises it.

In BM lessons: had tarikan: Berapa banyak image Docker Hub benarkan anda tarik setiap 6 jam. Log masuk menaikkannya.

registry

The shop freezer where image packs are stored and shared, like Docker Hub.

In BM lessons: registry: Tempat simpan dan kongsi image, contohnya Docker Hub.

rootless mode

The Docker daemon and its containers run as you, not as root. A break-out gets only your rights.

In BM lessons: rootless mode: Daemon Docker dan container berjalan sebagai anda, bukan root. Kalau terlepas, ia dapat hak anda sahaja.

runc

The runtime that sets up the booth: it switches on namespaces and cgroups, starts your app, then leaves.

In BM lessons: runc: Runtime yang sediakan bilik: hidupkan namespace dan cgroups, mulakan aplikasi, kemudian pergi.

scale

Run more copies of one service: docker compose up -d --scale api=3.

In BM lessons: scale (skala): Jalankan lebih banyak salinan satu service: docker compose up -d --scale api=3.

service

One dish in the set meal, like web or db. Compose makes its containers and names them after it.

In BM lessons: service: Satu hidangan dalam set, contohnya web atau db. Compose buat container untuknya dan namakan ikut nama service.

signing

A tamper-proof seal on an image's digest. Anyone can check it before they run the image.

In BM lessons: tandatangan: Meterai kalis usik pada digest image. Sesiapa boleh semak sebelum menjalankan image itu.

tag

The label after the colon, like nginx:1.30-alpine. No tag means :latest.

In BM lessons: tag: Label selepas titik bertindih, contohnya nginx:1.30-alpine. Tiada tag bermaksud :latest.

tmpfs

A note on a whiteboard: data kept in memory only. Every stop wipes it.

In BM lessons: tmpfs: Nota di papan putih: data dalam memori sahaja. Setiap kali berhenti, ia dipadam.

user namespace

Root inside the container, an ordinary user on the laptop. Off in Docker unless you ask.

In BM lessons: user namespace: Root di dalam container, pengguna biasa pada laptop. Mati dalam Docker kecuali anda minta.

Verified Publisher

A Docker Hub badge for images from companies that Docker has checked.

In BM lessons: Verified Publisher: Lencana Docker Hub untuk image daripada syarikat yang Docker sudah semak.

virtual machine (VM)

A whole house: a full computer with its own operating system, running inside your computer.

In BM lessons: virtual machine (mesin maya): Sebuah rumah penuh: komputer lengkap dengan sistem pengendalian sendiri, berjalan dalam komputer anda.

volume

A locker outside the lunchbox, so data stays when the container is gone.

In BM lessons: volume: Loker data supaya tak hilang bila container dibuang.

vulnerability scanner

The food inspector: checks every package in an image against lists of known holes (CVEs).

In BM lessons: pengimbas kelemahan: Pemeriksa makanan: semak setiap pakej dalam image dengan senarai lubang keselamatan yang diketahui (CVE).

writable layer

The container's own thin top layer. Your changes land there. docker rm throws it away.

In BM lessons: writable layer (lapisan tulis): Lapisan nipis milik container sendiri. Perubahan anda masuk ke situ. docker rm membuangnya.

WSL 2

A real Linux inside Windows. Docker Desktop uses it to run containers.

In BM lessons: WSL 2: Linux sebenar di dalam Windows. Docker Desktop guna ia untuk jalankan container.

YAML

A neat recipe card for computers, made of keys, colons, dashes and spaces.

In BM lessons: YAML: Kad resepi yang kemas untuk komputer, dibuat daripada kunci, titik bertindih, sengkang dan ruang.