Docker Dos And Do Nots
summary
Covers ten concrete Dockerfile mistakes with fixes: avoid shipping your entire build context (the stray COPY . that sends the git dir), always use a .dockerignore, pin and control base images (a private contractor’s base image disappeared), prefer a private registry or Artifactory, and use multi-stage builds to keep build tools out of runtime images. Do not hardcode secrets or config, don’t curl unknown scripts, and don’t run processes as root — Systig sees 3 million containers and 76% run as root, so fix users and versions.
AI-written summary · about
chapters (13)
- 0:00Introduction and background
- 2:22Docker fundamentals
- 5:27Understanding docker ignore
- 9:12Managing base images
- 12:42Defining versioning
- 19:24Maintenance and updates
- 22:57Optimizing build tools
- 25:52External resource management
- 28:55Handling secrets and config
- 35:55Docker file simplicity
- 39:00Caching strategies
- 42:30Running without root
- 50:15Q&A and closing remarks
related talks
57mBreaking and Fixing your ‘Docker’ ized environments
47mDocker 201 Security
38mFrom Docker'fail to Dockerfile.. a true story!
45mFumbling Forward - Docker Don'ts
41mDocker Best-Practice and Dockerfile Optimization
34mDefence Against the Docker Arts
26mContainerization crossroads: Experiences-Experiments-Expectations
21mMaking Docker Actually Work