The host operating system supplies kernel isolation and resource controls while a container image defines the filesystem and startup command. Containers are lighter than full virtual machines because they share the host kernel. External volumes, networks, and secrets remain deployment concerns.