Technology for analyzing a target machine (e.g., virtual machine or physical machine) and converting the services of the target machine to one or more container images that can be run using operating system level virtualization. An example method may include: receiving, by a processing device, data of a virtual machine, the data indicating a configuration of the virtual machine and a set of processes executed by the virtual machine; identifying, by the processing device, computer code of a first process of the set of processes executed by the virtual machine; analyzing the computer code to detect a link between the first process and a second process of the set of processes; and building a container image in view of the data of the virtual machine and the identified link, wherein the container image comprises the computer code of the first process and computer code of the second process.