No worries, I'll link to some Arch Wiki stuff to help explain. Containers are a very cool system for isolating environments. Similar to how python uses VENV to contain all the dependencies for a python program, containers let you have a full environment beyond just the python stuff. I use podman to actually run the container on my computer. You use a Containerfile, to define what you want this environment to look like, and docker/podman does all the hard work for you, by making an image file that holds the whole thing in one place separate from our real OS.

This is my start script.

#!/usr/bin/env bash

podman run -it --rm --name stablediff2 -p 7860:7860 \
-e COMMANDLINE_ARGS="--api --listen --port 7860 --enable-insecure-extension-access --medvram-sdxl --cors-allow-origins *" \
        --device /dev/dri:dev/dri \
        --device /dev/kfd:/dev/kfd \
        -v ./models:/dockerx/stable-diffusion-webui/models:z \
        -v ./repos:/dockerx/stable-diffusion-webui/repositories:z \
        -v ./extensions:/dockerx/stable-diffusion-webui/extensions:z \
        -v ./embeddings:/dockerx/stable-diffusion-webui/embeddings:z \
        -v ./outputs:/dockerx/stable-diffusion-webui/outputs:z \
        -v ./inputfiles:/dockerx/stable-diffusion-webui/inputfiles:z
        localhost:stablediffusion:latest

This is just telling podman to start the container, give it an actual terminal to connect to, remove the container if it stops running, give it a name, and tell it what ports it can run on.

podman run -it --rm --name stablediff2 -p 7860:7860

These are the arguments passed to the webui start script itself, mostly for my own convenience. The medvram-sdxl is not required, since my card has enough vram, but then I can't be doing anything else with it. So I sacrifice a bit of generation speed for more free memory for the rest of my computer. I'm running this locally, so insecure extension access also doesn't matter since I'm the only one using this, just makes installing extensions from the webui directly.

-e COMMANDLINE_ARGS="--api --listen --port 7860 --enable-insecure-extension-access --medvram-sdxl --cors-allow-origins *" \

These are just the device files that correspond to my GPU, so that the container has access to it. Without this, the container would only have access to CPU based generation. Everything else is just the folders that holds my models, extensions etc. You have to give the container exactly what you want it to, because its isolated away from your normal files unless you tell it otherwise.

--device /dev/dri:dev/dri \
--device /dev/kfd:/dev/kfd \

This is iterations per second, I believe. It's basically a measure of how fast stablediffusion is is running a particular generation of an image. It lets people compare performance across different software and hardware configurations.

10 it/s

NixOS is the name of the GNU/Linux operating system I'm using, similar to how MacOS is different than Windows, NixOS is another type of operating system. I've only been using it for a few months, but its extremely cool. Before that I mostly used Debian and Fedora, but the main difference between NixOS and them is that you can define you whole OS as a configuration files, and then the tools it's designed around build your system for you. So instead of say, installing a program, opening it up and going into settings and changing everything to be how you like it. You can instead just make a file that lists everything the way you want it from the start, and Nix installs the program and sets it all up all in one go. It has a pretty big learning curve, and its features are numerous that I have yet to take full advantage of them. Probably not the best to start with if you are new to GNU/Linux systems, but once you see the benefits of why it does things differently, its awesome.

Hopefully that explains most of the words I used. Pardon my formatting, as I don't know markdown very well and I think I separated everything okay. :)