Docker and OCI Hardening Guide (wonderfall.dev)
Containers aren’t that new fancy thing anymore, but they were a big deal. And they still are. They are a concrete solution to the following problem: