A container packages an application and its dependencies so it can run consistently across supported environments.
A process with a packaged environment
A container bundles an application with libraries and configuration expectations while sharing the host kernel. It starts quickly and gives deployment tooling a consistent unit to move.
Isolation has boundaries
Containers are not miniature virtual machines. Images need patching, minimal permissions, secret handling, resource limits, and runtime controls to reduce risk.