How does an isolated Docker container establish communication with the host system at startup?

Docker containers are isolated from the host system using Linux kernel technologies such as namespaces and cgroups. To communicate with the host when running a Docker container, several mechanisms are used:

• Network interfaces: Docker creates a virtual network bridge (usually docker0) to which containers are connected. Containers receive IP addresses in this network and can communicate with the host through this bridge.
• Mounting volumes: Using the -v or --mount option, directories or files from the host can be mounted inside the container, enabling data exchange.
• Ports: When starting a container, ports can be forwarded from the host to the container (-p hostPort:containerPort), allowing applications inside the container to accept requests from the host or outside.

Thus, communication is established through network bridges, port forwarding, and shared volumes, despite the container's isolation.