Container icons

The 57 container icons in DevOps, described

AppArmor profileapparmor

A shield inside the crate — a mandatory access profile wrapped around the container.

Artifact repositoryartifact-repo

A box above the shelf — the store that keeps built things of every kind, not only images.

Attestationattestation

A document with a shield below its title — a signed claim about how an artifact came to be.

Base imagebase-image

A box with a floor laid inside — the image every other layer is built upon.

Bind mountbind-mount

A folder inside the crate — a directory from the host shown into the container as is.

Build argumentbuild-arg

Brackets on the brick — a value passed into the build from outside.

Build attestationbuild-attest

A shield on the brick — a signed statement of how and where the build was made.

Build cachebuild-cache

A brick kept in the tray — the pieces of the last build, ready to be reused.

Cache mountcache-mount

Two shelves inside the crate — a cache slotted into the build so the next run skips the work.

Capability dropcapability-drop

A minus inside the crate — a kernel capability the container gives up before it runs.

Chart repositorychart-museum

A roof over the shelf — the place packaged charts are published and found.

Compose stackcompose-stack

Two crates stacked — several containers defined and started together as one application.

Containercontainer

A container — an app packaged with everything it needs, isolated like a Docker image.

Container execcontainer-exec

A prompt inside the crate — a shell opened inside a running container.

Container filecontainer-file

A container file — the Dockerfile recipe that says how to build the image.

Container healthcontainer-health

A check inside the crate — the container answers its health check and is fit to serve.

Container imagecontainer-image

A container image — the immutable layered template a container is started from.

Container logscontainer-logs

Lines of output inside the crate — what a container has written since it started.

Container networkcontainer-network

A globe inside the crate — the network a container joins and the names it can reach.

Container restartcontainer-restart

A play against a bar inside the crate — the container started over from the beginning.

Container runningcontainer-run

Container running — the container is up and live, serving traffic.

Container stoppedcontainer-stop

Container stopped — the container is halted and down, no longer serving.

Cosigncosign

A box with a key inside — the keypair-based signature that seals an image.

CVE scancve-scan

A shield with a lens inside — known vulnerabilities looked for by their published numbers.

Dependency pindependency-pin

Two boxes pinned together — a dependency held at one exact version.

Distrolessdistroless

A box holding one dot — an image with nothing in it but the program, no shell, no package manager.

Entrypointentrypoint

An arrow arriving inside the crate — the command a container runs the moment it starts.

Image bloatimage-bloat

A box packed wall to wall — an image far larger than what it needs to run.

Image diffimage-diff

A box with a plus over a minus inside — what one image has that another does not.

Image digestimage-digest

A box with hash lines inside — the content address that names exactly this image.

Image layerimage-layer

A box with one layer inside — a single filesystem step the image is built from.

Image mirrorimage-mirror

Arrows trading places above the shelf — a registry that keeps a copy of another's images.

Image promoteimage-promote

A box with an arrow rising inside — the same image moved on to the next environment.

Image pruneimage-prune

A box with a minus inside — images nobody uses any more removed from the host.

Image scanimage-scan

A box with a lens inside — the image searched for known vulnerabilities before it ships.

Image signimage-sign

A box with a signature inside — the image signed so its origin can be proven.

Image tagimage-tag

A box with a label inside — the human name an image is pushed and pulled by.

Layer cache hitlayer-cache-hit

A box with a check inside — a layer already built once and reused as is.

License scanlicense-scan

A certificate with a lens where its seal was — the licences inside checked against the rules.

Multi-stage buildmulti-stage-build

A double chevron on the brick — a build in stages, each handing on only what the next needs.

OCI artifactoci-artifact

A box with a plain square inside — anything at all stored the way an image is.

Patch imagepatch-image

A box with a plus inside — a fix applied to an image without rebuilding everything.

Podpod

A pod — a group of containers that live and die together on Kubernetes.

Rebuild triggerrebuild-trigger

A stop square inside the loop — a build started again because its inputs changed.

Image registryregistry-image

An image registry — the shelf where built container images are stored.

Registry pullregistry-pull

An arrow rising off the shelf — an image fetched down from the registry.

Registry pushregistry-push

An arrow coming down onto the shelf — an image sent up to the registry.

Reproducible buildreproducible-build

An equals sign on the brick — build it again anywhere and get the very same bytes.

Rootless containerrootless-container

A person inside the crate — the container runs as an ordinary user, never as root.

SBOMsbom

A box with a bulleted list inside — the bill of every package and version in the image.

Seccomp profileseccomp

A funnel inside the crate — the system calls a container is allowed to make.

SLSA levelslsa

A shield with three levels inside — how much of the supply chain a build can vouch for.

Squash layerssquash-layer

A box with a double chevron pressing up inside — many layers flattened into one.

Supply chainsupply-chain

A delivery truck — every hand a piece of software passes through before it runs.

Trusted registrytrusted-registry

A shield above the shelf — the only registry images may be pulled from.

Vendor dependenciesvendor-deps

Two boxes brought into the tray — dependencies copied in-house so a build needs no network.

Volume mountvolume-mount

A cylinder inside the crate — persistent storage mounted where the container expects it.

In code, each is one import — import { Apparmor } from "@iconmind/react/icons/apparmor" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Narrow it by tag