Hello, I have a question.
I want to make a container and it must run one or more programs.
The question now is: can I acess the container in some way and stop programs (that were star by the CMD command in the image) and start doing other stuff (ex: get files from the container or put other programs and run them)? (pausing or stopping container doesn’t matter)
Is there a way to make container “static” not editable?
Why do you deploy more applications in your image as you are going to allow to start?
Make a read-only filesystem which your single app, nothing more. Then people could start it and nothing else.
read-only file systems are a good pattern. Your container basically should not store any thing on the filesystem.
If your container needs temporary files, add a --tmpfs /tmp/foo.
If your container wants to store something permanent, add a --volume /tmp/bar