anchor.diff:  
   After Garden-runC creates a container, Diego runs and monitors the processes inside of it.
   
  -To determine which processes to run, the [Cloud Controller](../concepts/architecture/cloud-controller.html) 
  +To determine which processes to run, the [Cloud Controller](../concepts/architecture/cloud-controller.html)
   fetches and stores the metadata associated with the Docker image.
   The Cloud Controller uses this metadata to perform the following actions:
   
  
positive.code: 
  <%= vars.garden_runc %>
  
  Both Docker and Garden-runC use libraries from the [Open Container Initiative (OCI)](https://www.opencontainers.org/) to build Linux containers. 
  After creation, these containers use name space isolation, or *namespaces*, and control groups, or *cgroups*, to isolate processes in containers and limit resource usage.
  These are common kernel resource isolation features used by all Linux containers.
  
  Before Garden-runC creates a Linux container, it creates a file system that is mounted as the root file system of the container. 
  Garden-runC supports mounting Docker images as the root file systems for the containers it creates.
  
  When creating a container, both Docker and Garden-runC perform the following actions:
  
negative.code: 
  To deploy a Docker image using Docker trusted registries, run:
  
   <pre class='terminal'>$ cf push my-app -o MY-PRIVATE-REGISTRY.DOMAIN:5000/image/name:v2</pre>
  
   Replace `MY-PRIVATE-REGISTRY.DOMAIN` with your domain name, which resolves to the private registry.
  In this example, 5000 is the port on which your private registry serves traffic. `image/name` is the name of the Docker image repository. `v2` is a tag in that repository that refers to a specific image.
  
  ###<a id='volume'></a> Docker Volume Support
  
  Diego now supports Docker volumes. More information can be found [here](https://docs.cloudfoundry.org/devguide/services/using-vol-services.html) on how to enable volume support, and the limitations of NFS volumes within the [NFS Bosh Volume Release](https://github.com/cloudfoundry-incubator/nfs-volume-release#special-notes-for-docker-image-based-apps).
  