~/talk

Best Practices In Implementing Container Image Promotion Pipelines

Talkat DevOpsDays Raleigh 2020 · 2020-10-19..10-20· [devops-and-delivery, security]
slides:none on file

Concrete claim: promote artifacts, don't rebuild them; practical tools: JFrog Container Registry/Artifactory, JFrog CLI, nginx URL rewrite for virtual hosts; surprising operational fact: Docker Hub throttling and mutable tags force local caching and remote proxy caches Docker Hub; reproducibility tactic: use checksums and build once and promote immutable images across separate registries per maturity; convenience tactic: double tagging links latest to immutable digest so promotion is metadata-only (no network copy) and pipelines can enforce strict quality gates.

AI-written summary · about

  1. 0:00Start
  2. 3:09SHOWNOTES
  3. 4:44PIPELINE: QUALITY GATES AND VISIBILITY
  4. 5:55$docker build
  5. 6:27LET'S docker build IN EVERY ENV!
  6. 11:21WHAT'S UP WITH THE GATES?!
  7. 12:10OPTION 1: METADATA TAGS
  8. 13:02OPTION 2: DOCKER REPOSITORIES
  9. 14:10SEPARATE REGISTRIES PER ENVIRONMENT
  10. 16:23VIRTUAL HOSTS/PORTS TO THE RESCUE
  11. 17:43LET'S ABUSE THINGS!
  12. 23:29WIN-WIN-WIN
  13. 27:15STATIC TAGGING VS DYNAMIC TAGGING
  14. 32:03CONCLUSIONS
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.