<commit_before>---
post_title: Using Containerizers
menu_order: 40
---

A containerizer is a Mesos agent component responsible for launching containers, within which you can run a service. Running services in containers offers a number of benefits, including the ability to isolate tasks from one another and control task resources programmatically.

DC/OS supports the Mesos containerizer types:

- The [DC/OS Universal Container Runtime](/docs/1.10/deploying-services/containerizers/ucr/).

- The [Docker containerizer](/docs/1.10/deploying-services/containerizers/docker-containerizer/).

The tables below provide a feature comparison of your containerizer choices on DC/OS.

## DC/OS Features

| 																				| Docker			| UCR 			| Comments |
| --------------------------------------- | ----------- | --------- | -------- |
| **Command**                             | Yes         | Yes      |          |
| **Container Images** 										| Yes					| Yes				|					 |
| **Pods**																| No					| Yes				|					 |
| **GPUs**																| No					| Yes				|					 |
| **URIs**																| Yes					| Yes				|					 |
| **Docker Options**											| Yes					| No				|					 |
| **Force Pull**													| Yes					| Yes				|	CLI only |
| **Secrets**															| Yes					| Yes				| Enterprise only |
| **Debugging with exec**         				| No					| Yes				|	CLI only |
| **All Security Modes**									| Yes					| Yes				| Enterprise only |

## Container Backend

|																					|	Docker			|	UCR			  |
| --------------------------------------- | ----------- | --------- |
| **Overlayfs**                           | Yes         | Yes       |
| **Aufs**                                | Yes         | Yes       |
| **Bind**                                | N/A         | Yes       |

## Storage

|																					|	Docker			|	UCR				| Comments  |
| --------------------------------------- | ----------- | --------- | --------- |
| **Local Persistent Volumes**						| Yes					| Yes				|						|
| **Host Volumes**												| Yes					| Yes				| CLI only  |
| **External Volumes**                    | Yes         | Yes       |           |

## Service Endpoints

|																					|	Docker			|	UCR				|
| --------------------------------------- | ----------- | --------- |
| **Named Ports**													| Yes					| Yes				|
| **Numbered Ports**											| Yes					| Yes				|

## Networking

|																					|	Docker				UCR				|Comments   |
| --------------------------------------- | ----------- | --------- | --------- |
| **Host Networking**       							| Yes					| Yes				|						|
| **Bridge Networking**       						| Yes					| No				|						|
| **CNI**         												| N/A					| Yes				|						|
| **CNM**                    							| Yes					| N/A				| Docker 1.11+ |
| **L4lB**        												| Yes					| Yes				|	Requires defined service endpoints. TCP health checks do not work with L4LB |

## Networking

|																					|	Docker				UCR				|Comments   |
| --------------------------------------- | ----------- | --------- | --------- |

## Private Registry

|																	|	Docker			|	UCR				|
| ------------------------------- | -----------  --------- |
| **Token-based Container Auth**	| Yes					| No				|
| **Token-based Cluster Auth**		| Yes					| Yes				|
| **Basic Container Auth**        | Yes         | No        |
| **Basic Cluster Auth**          | Yes         | Yes       |

## Health Checks

|																					|	Docker			|	UCR				|Comments   |
| --------------------------------------- | ----------- | --------- | --------- |
| **TCP**													        | Yes					| Yes				|	CLI only	|
| **HTTP/HTTPS**                          | Yes         | Yes       | CLI only  |
| **Command**                             | Yes         | Yes       |           |
| **Local TCP**                           | Yes         | Yes       | CLI only  |
| **Local HTTP/HTTPS**                    | Yes         | Yes       |           |
<commit_msg>formatting fix<commit_after>---
post_title: Using Containerizers
menu_order: 40
---

A containerizer is a Mesos agent component responsible for launching containers, within which you can run a service. Running services in containers offers a number of benefits, including the ability to isolate tasks from one another and control task resources programmatically.

DC/OS supports the Mesos containerizer types:

- The [DC/OS Universal Container Runtime](/docs/1.10/deploying-services/containerizers/ucr/).

- The [Docker containerizer](/docs/1.10/deploying-services/containerizers/docker-containerizer/).

The tables below provide a feature comparison of your containerizer choices on DC/OS.

## DC/OS Features

| 																				| Docker			| UCR 			| Comments |
| --------------------------------------- | ----------- | --------- | -------- |
| **Command**                             | Yes         | Yes      |          |
| **Container Images** 										| Yes					| Yes				|					 |
| **Pods**																| No					| Yes				|					 |
| **GPUs**																| No					| Yes				|					 |
| **URIs**																| Yes					| Yes				|					 |
| **Docker Options**											| Yes					| No				|					 |
| **Force Pull**													| Yes					| Yes				|	CLI only |
| **Secrets**															| Yes					| Yes				| Enterprise only |
| **Debugging with exec**         				| No					| Yes				|	CLI only |
| **All Security Modes**									| Yes					| Yes				| Enterprise only |

## Container Backend

|																					|	Docker			|	UCR			  |
| --------------------------------------- | ----------- | --------- |
| **Overlayfs**                           | Yes         | Yes       |
| **Aufs**                                | Yes         | Yes       |
| **Bind**                                | N/A         | Yes       |

## Storage

|																					|	Docker			|	UCR				| Comments  |
| --------------------------------------- | ----------- | --------- | --------- |
| **Local Persistent Volumes**						| Yes					| Yes				|						|
| **Host Volumes**												| Yes					| Yes				| CLI only  |
| **External Volumes**                    | Yes         | Yes       |           |

## Service Endpoints

|																					|	Docker			|	UCR				|
| --------------------------------------- | ----------- | --------- |
| **Named Ports**													| Yes					| Yes				|
| **Numbered Ports**											| Yes					| Yes				|

## Networking

|																					|	Docker			|	UCR				|Comments   |
| --------------------------------------- | ----------- | --------- | --------- |
| **Host Networking**       							| Yes					| Yes				|						|
| **Bridge Networking**       						| Yes					| No				|						|
| **CNI**         												| N/A					| Yes				|						|
| **CNM**                    							| Yes					| N/A				| Docker 1.11+ |
| **L4lB**        												| Yes					| Yes				|	Requires defined service endpoints. TCP health checks do not work with L4LB |

## Private Registry

|																	|	Docker			|	UCR				|
| ------------------------------- | ----------- | --------- |
| **Token-based Container Auth**	| Yes					| No				|
| **Token-based Cluster Auth**		| Yes					| Yes				|
| **Basic Container Auth**        | Yes         | No        |
| **Basic Cluster Auth**          | Yes         | Yes       |

## Health Checks

|																					|	Docker			|	UCR				|Comments   |
| --------------------------------------- | ----------- | --------- | --------- |
| **TCP**													        | Yes					| Yes				|	CLI only	|
| **HTTP/HTTPS**                          | Yes         | Yes       | CLI only  |
| **Command**                             | Yes         | Yes       |           |
| **Local TCP**                           | Yes         | Yes       | CLI only  |
| **Local HTTP/HTTPS**                    | Yes         | Yes       |           |

{'fraction_non_alphanumeric': 0.22739969527679024, 'fraction_numerical': 0.003301168105637379, 'mean_word_length': 0.8425730994152046, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 27, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5208935', 'n_tokens_mistral': 2915, 'n_tokens_neox': 2165, 'n_words': 515}