Usage of containers in software applications is on the rise, and with their increasing usage in production comes a need for robust testing and validation. Containers provide great testing environments, but actually validating the structure of the containers themselves can be tricky. via Pocket #docker #containers #testing #IFTTT #Pocket #Unread #pub

This post was updated on 6 Jan 2017 to cover new versions of Docker. It’s clear from looking at the questions asked on the Docker IRC channel (#docker on Freenode), Slack and Stackoverflow that there’s a lot of confusion over how volumes work in Docker. via Pocket #IFTTT #Pocket #docker #volumes #pub

There are more than several informative blog posts and articles that explain Docker data management to great length, however confusion has recently been introduced with the introduction of the volume API in Docker 1.9. via Pocket #IFTTT #Pocket #docker #pub

Dockerfile linter, validate inline bash, written in Haskell - hadolint/hadolint #docker #lint #Unsorted #pub

A significant part of the IT world relies on Docker containers. They are easy to use & portable. But are they always good? Let's see how to use them safely. #docker #root #pub

#docker #security #cheatsheet #hardening #Unread #via:popular #toread #pub

Container Signing, Verification and Storage in an OCI registry. Cosign aims to make signatures invisible infrastructure. Cosign supports: Hardware and KMS signing Bring-your-own PKI Our free OIDC PKI (Fulcio) Built-in binary transparency and timestamping service (Rekor) #cryptography #build #containers #docker #pub

"Distroless" images contain only your application and its runtime dependencies. They do not contain package managers, shells or any other programs you would expect to find in a standard Linux distribution. For more information, see this talk (video). Why should I use distroless images? Restricting what's in your runtime container to precisely what's necessary for your app is a best practice employed by Google and other tech giants that have used containers in production for many years. It improves the signal to noise of scanners (e.g. CVE) and reduces the burden of establishing provenance to just what you need. #devops #container #docker #google #pub

The Amazon ECR Docker Credential Helper is a credential helper for the Docker daemon that makes it easier to use Amazon Elastic Container Registry. #amazon #aws #docker #cli #ecr #pub