Docker

Docker is a set of platform as a service (PaaS) products that use OS-level virtualization to deliver software in packages called containers. Containers are isolated from one another and bundle their own software, dependencies, libraries and configuration files. Data that is passed to and from the containers is only allowed through well-defined channels. Because all of the containers share the services of a single operating system kernel, they use fewer resources than virtual machines.

Docker software is typically distributed as flat inert images. These images are used by the Docker engine to generate the aforementioned containers, which is where the software actually runs from. When the container is no longer needed, it can be shut down or destroyed. When the container is needed again, it can be quickly regenerated from the original image.

From the documentation:

Docker is an open platform for developing, shipping, and running applications. Docker enables you to separate your applications from your infrastructure so you can deliver software quickly. With Docker, you can manage your infrastructure in the same ways you manage your applications. By taking advantage of Docker's methodologies for shipping, testing, and deploying code, you can significantly reduce the delay between writing code and running it in production.

Docker isn't a single piece of software, but rather several components packaged together:

• The Docker Engine is the service that runs in the background of your computer or server, which handles the deployment of containers.

• You can use HumphreyBoaGart/vmask to deploy compartmentalized browser environments. This package is mainly for sockpuppetry. However, you can also use it to quickly spin up disposable browsers for visiting questionable websites, and impeding the lateral movements of trackers and other scripts.