Creating Production Ready Containers: What Devs Need to Know to Secure Their Containers
summary
Hands-on Node.js demo uses Dockerfiles, the Slim.ai Docker Desktop extension and docker-slim to show concrete fixes: set user node instead of root, pin exact base image (example 16.14.2 vs latest), split COPY to enable layer caching, and use multistage builds. Alpine base trims an uncompressed image from ~900 MB to ~100 MB, docker-slim reports up to 10–30x smaller images and removes shells/package managers, and the extension confirms each optimization’s file, size and vulnerability differences.
AI-written summary · about
chapters (13)
- 0:00Intro
- 1:40Three key optimization takeaways
- 2:49What is needed for production
- 4:14Container Slimming
- 4:31"Hello World" NodeJs Example
- 4:44Example "Hello World" Dockerfile
- 4:56Creating a Better DockerFile
- 5:22Setting a User
- 6:50Pinning a Version
- 9:35Layer Caching
- 11:04NPM Cache Management
- 13:04Alternative Base Image
- 16:26Multi-Stage Builds
related talks
29m5 Best Security Practices for your Production-Ready Containers
29m5 Security Best Practices For Production Ready Containers
43mMaster production: best practices to build Node.js Docker images
31mMaster Production-grade Best Practices to Build your Node.js Docker Images
40m"Willy Wonka and the Secure Container Factory"
33mBest Practices for Production-ready .NET Docker Images
35mSecuring Containers by Breaking In
55mRecipes and Runtimes: Making Sense of Containers in 2026