What's the practical difference between CMD and ENTRYPOINT?

CMD provides a default command (and/or default arguments) that is entirely overridden if the user supplies a command at `docker run`. ENTRYPOINT defines the fixed executable that always runs; when both are present, CMD's value becomes ENTRYPOINT's default arguments rather than being replaced outright.