From Docker'fail to Dockerfile.. a true story!
summary
Session compiles 10 concrete Dockerfails (9 categories plus a bonus) and shows fixes with runnable tooling and a GitOps pipeline demo (repo linked). Specifics: lint Dockerfiles with hadolint; assert image contents with container-structure-test; inspect layers with dive; use multi-stage builds and split COPY to cache dependencies (build time drops from ~1 minute to ~1 second in the demo). Add secret scanning (GitGuardian/gitleaks), produce a docker sbom, run vulnerability scans and sign images, split services, tune healthcheck interval/timeout/start-period, and the pipeline builds, tests, scans, signs and deploys successfully.
AI-written summary · about
chapters (12)
- 0:00Introduction and setup
- 1:03Pitfalls in container workflow
- 5:42Linting Dockerfiles with Hadolint
- 10:20Validating containers semantically
- 13:37Optimizing Docker build layers
- 17:56Multi-stage builds for environments
- 21:28Handling secrets in containers
- 24:59Docker image versioning best practices
- 29:19Health checks in production
- 32:13Decoupling containers for scaling
- 34:44Security scanning and signing images
- 36:55Alternatives to Dockerfiles
related talks
53mDocker Dos And Do Nots
15mDocker image testing in GitLab CI
45mFumbling Forward - Docker Don'ts
21mSecuring Dockerized apps in the Microsoft ecosystem
28mThe Ultimate Container Challenge: An Interactive Trivia Game on OCI, Podman, Docker...
46mAdding security for reliable continuous delivery
58mOptions Galore to Get from Source Code to Container
33mDocker Container Lifecycles – Problem or Opportunity?