Docker, OCI, and the Standards Behind the Container Ecosystem

Docker sits at the center of the modern container ecosystem, but its success depends on open standards and community-driven projects working behind the scenes. This article explains the history of Docker, Inc., how the Docker platform works, and the role of the OCI, CNCF, and the Moby Project in shaping container technology.

DockerOCICNCF

~3 دقیقه مطالعه · آخرین به‌روزرسانی ۱۴ شهریور ۱۴۰۵

Introduction

The term Docker is often used loosely, but it actually refers to two distinct things: the Docker platform, a set of technologies for building, sharing, and running containers, and Docker, Inc., the company behind it. Understanding both, along with the standards bodies that govern the ecosystem, is essential for anyone working with containers today.

The Origins of Docker, Inc.

Docker, Inc. is a technology company founded by developer and entrepreneur Solomon Hykes. The company originally operated as a platform as a service (PaaS) provider called dotCloud, which delivered its services using containers managed by an internal tool also called Docker.

In 2013, the struggling PaaS business was dropped, the company rebranded as Docker, Inc., and focused entirely on bringing container technology to a wider audience.

How the Docker Platform Works

At a high level, the Docker platform consists of two major components:

  • The CLI (client) — the command-line tool used to issue commands
  • The engine (server) — the server-side components that run and manage containers

The CLI converts user-friendly commands into API requests, which are sent to the engine. The client and engine can run on the same machine or communicate over a network.

docker run nginx

Behind the scenes, this simple command is translated into an API request handled by the daemon, which manages all the underlying complexity so the user doesn't have to.

The Open Container Initiative (OCI)

The Open Container Initiative (OCI) is a governance council under the Linux Foundation responsible for maintaining low-level container standards. It was created after early disagreements in the ecosystem, when a competing standard called appc emerged alongside Docker's own approach.

To avoid the confusion of two competing standards, major players in the industry came together to form the OCI as a vendor-neutral governing body. Today, the OCI maintains three core specifications:

  • The image-spec
  • The runtime-spec
  • The distribution-spec

All modern versions of Docker comply with these specifications. For example, BuildKit produces OCI-compliant images, and Docker Hub implements the OCI distribution spec as a compliant registry.

The Cloud Native Computing Foundation (CNCF)

The Cloud Native Computing Foundation (CNCF) is another Linux Foundation project, founded in 2015 to advance container technologies and cloud-native computing. Rather than defining specifications, the CNCF hosts and supports major projects such as Kubernetes, containerd, Notary, and Prometheus.

CNCF projects progress through three maturity phases:

  • Sandbox
  • Incubating
  • Graduated

Graduated projects are considered production-ready and are held to strong standards of governance and best practices. Docker itself relies on at least two CNCF-hosted technologies: containerd and Notary.

The Moby Project

The Moby Project is a community-led initiative originally created by Docker, Inc. to provide specialized tools for building container platforms. Developers can mix and match tools from Moby with in-house solutions or components from other projects.

The project now includes contributors from companies such as Microsoft, Mirantis, and Nvidia.

Conclusion

Docker's success is not the result of a single company working in isolation. It is built on top of open standards from the OCI, supported by cloud-native projects hosted by the CNCF, and enriched by community tools from the Moby Project. Together, these standards and organizations form the foundation that keeps the container ecosystem consistent, interoperable, and constantly evolving.

نوشته و پژوهش‌شده توسط دکتر شاهین صیامی

مقالات مرتبط

How Docker Uses Linux Security Technologies: Namespaces, Cgroups, and More

Docker's security model is built on layered defense, combining well-established Linux kernel technologies with sensible defaults out of the box. This article explains how namespaces, control groups, capabilities, mandatory access control, and seccomp work together to isolate and secure containers.

ادامه

Managing Persistent Data in Docker with Volumes

Containers get a temporary writable layer by default, which disappears the moment a container is deleted — fine for scratch data, but risky for anything worth keeping. This article explains how Docker volumes decouple persistent data from container lifecycles, and walks through creating, using, and sharing them safely.

ادامه

How Docker Overlay Networks Work: VXLAN Under the Hood

Overlay networks let containers on different hosts communicate as if they shared a single flat network, forming the backbone of most cloud-native microservices apps. This article covers how to build, encrypt, and test a Docker overlay network across a Swarm cluster, and explains the VXLAN tunneling technology powering it behind the scenes.

ادامه

Connecting Docker Containers to VLANs and Load Balancing with Swarm

Beyond basic bridge networks, Docker can connect containers directly to existing physical VLANs, resolve service names automatically, and distribute traffic across a Swarm cluster. This article covers the macvlan driver, Docker's built-in service discovery, and Swarm's ingress load balancing mesh.

ادامه

Understanding Docker Networking: CNM, Libnetwork, and Bridge Networks

Docker networking is built on an open design called the Container Network Model, implemented through libnetwork and extended by pluggable drivers. This article covers the theory behind Docker networking and walks through creating and testing single-host bridge networks, including name resolution and port mapping.

ادامه

Deploying and Managing Multi-Node Clusters with Docker Swarm

Docker Swarm turns a group of Docker nodes into a secure, highly available cluster with built-in application orchestration. This article covers building a multi-node swarm, deploying a microservices app declaratively, and performing rolling updates without losing desired-state consistency.

ادامه