|5 days ago||5 days ago|
|GNU General Public License v3.0 only||Apache License 2.0|
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Kubernetes Security Checklist 2021
28 projects | dev.to | 18 Oct 2021
Dockerfile should be checked during development by automated scanners (Kics, Hadolint, Conftest)
3 projects | reddit.com/r/u_sybrenbolandit | 31 Aug 2021
Linters are an effective way to catch (security) bugs early on in your development process. For most programming languages using linters is pretty standard. Hadolint is a linter for your Dockerfiles and is found on github here.
Best Practices for R with Docker
8 projects | dev.to | 31 May 2021
Best practices for writing Dockerfiles are being followed more and more often according to this paper after mining more than 10 million Dockerfiles on Docker Hub and GitHub. However, there is still room for improvement. This is where linters come in as useful tools for static code analysis. Hadolint lists lots of rules for Dockerfiles and is available as a VS Code extension.
21 Best Practises in 2021 for Dockerfile
2 projects | dev.to | 29 May 2021
Dockerizing Shiny Applications
3 projects | dev.to | 10 May 2021
Switching to the root USER opens up certain security risks if an attacker gets access to the container. In order to mitigate this, switch back to a non privileged user after running the commands you need as root. – Hadolint rule DL3002
What do you use for container security, and where do you think there is room for improvement?
1 project | reddit.com/r/devops | 2 Apr 2021
Hadolint for more SAST like : https://github.com/hadolint/hadolint
ShellCheck: A static analysis tool for shell scripts
12 projects | news.ycombinator.com | 18 Mar 2021
Hadolint is another. It's built atop shellcheck.
Docker Security Cheat Sheet
3 projects | news.ycombinator.com | 13 Mar 2021
I use Hadolint as a CI job to check if my Dockerfiles follow the good "rules". But there is one rule that annoys me the most and which is also present in this article, is the pinned OS package version rule. While I understand its interest, I struggle to handle this problem.
When I build new images and it failed because the pinned version is not available anymore, I have to dig into Debian or Ubuntu packages websites to find the new ones as they don't keep the old packages online.
I know I could ask Hadolint to ignore this rule but I don't like this and I think it's important to stick to a certain version of a package to avoid problems. I'm just trying to find any tip that could make me use pinned version and avoid this search every time. Does apt-get install allows wildcard for example?
Dockerfile Best Practices
7 projects | news.ycombinator.com | 2 Jan 2021
Another useful resource is hadolint (https://github.com/hadolint/hadolint), which not only gives additional recommendations, but also a way to enforce this.
Run More Stuff in Docker
11 projects | news.ycombinator.com | 26 Dec 2020
RUN curl -sSL "https://github.com/hadolint/hadolint/releases/download/$HADO..." -o /usr/bin/hadolint
Docker for Mac Without Docker Desktop
11 projects | news.ycombinator.com | 28 Jan 2022
WSL2 + Podman: Uma alternativa ao Docker Desktop
3 projects | dev.to | 28 Jan 2022
MicroOS Setup/Basics Guide?
1 project | reddit.com/r/openSUSE | 24 Jan 2022
For containers, there's a Podman guide on the new openSUSE documentation site as well as a getting started guide, documentation and talks on the official Podman site https://podman.io/
Start Podman on WSL2 in 4 steps
3 projects | dev.to | 21 Jan 2022
Getting Started with YugabyteDB and Docker
2 projects | dev.to | 19 Jan 2022
As a convenience, this guide uses podman as a replacement for the Docker CLI. Podman has the distinct advantage of being a daemonless container engine that can run without requiring root privilege escalation. It is still possible to use the Docker CLI with this guide by replacing the Podman command "podman" with "docker".
Who Watches Watchmen? – Integrating Elixir Applications with Systemd
3 projects | news.ycombinator.com | 17 Jan 2022
JFYI, with podman  you can get all the security benefits mentioned in the article with containers.
This is pretty neat and I love how cleanly the application code reads. I’m curious: is the Erlang VM super fast? I would have expected VM startup time to dominate the overall time to start.
Attaching to a container and exiting/stopping on macOS
1 project | reddit.com/r/podman | 17 Jan 2022
XKCD | Python Environment
6 projects | reddit.com/r/Python | 12 Jan 2022
I had however already some experience with docker beforehand. So knowing Docker and docker-compose was a big help. I would recommend learning about containerization anyway. So if you do not know anything about containerization then I suggest to start with that. Today there is aside from Docker itself there are also other tools that work similarly like podman and buildah that do not require root privileges. I would personally recommend podman as it is compatible with docker in most ways.
Advice for a new deployment
1 project | reddit.com/r/ceph | 11 Jan 2022
Now, 9 months later, when containers work - they're great. When they don't work - yes, they are hideous undebuggable black boxes! destroy the container and let cephadm make a new one and hope that the problem isn't in cephadm making the containers themselves... we did have to switch from RUNC container runtime to the CRUN after the 16.2.6 update because yeah, every time a container was launched it would crash immediately.
What you gonna add to your selfhost stack this year?
18 projects | reddit.com/r/selfhosted | 2 Jan 2022
What are some alternatives?
lima - Linux virtual machines, typically on macOS, for running containerd
Portainer - Making Docker and Kubernetes management easy.
nerdctl - Moved to https://github.com/containerd/nerdctl
kaniko - Build Container Images In Kubernetes
Moby - Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
singularity - Singularity: Application containers for Linux
toolbox - Tool for containerized command line environments on Linux
gvisor - Application Kernel for Containers
Nomad - Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
rancher - Complete container management platform
DietPi - Lightweight justice for your single-board computer!
ufw-docker - To fix the Docker and UFW security flaw without disabling iptables