* you need network isolation as well. no point in doing process isolation without it. and thus forwarded ports. * shared folders to persist necessary files. an

* you need network isolation as well. no point in doing process isolation without it. and thus forwarded ports. * shared folders to persist necessary files. and thus volumes. and a few years later distributed volumes. * not just isolate a process, but all its dependencies as well. no point in having a shared .so file which everybody can change, while just a single process is isolated. and thus a whole sandboxed container. * and then deal with the size of a full sandbox, until you need some way to share unchanged files. and thus images and layers. * and so on and so on. big things always start small. at least in docker's case they did start small, and they're still small and lean individual projects. feel free not to use docker compose or anything else. edit: formatting