What Actually Happens When You Run `docker run`

The complete chain: docker CLI → dockerd → containerd → runc → kernel namespaces & cgroups. What makes a container a container, step by step.