Observability
Hardened images: reducing your containers’ attack surface
Choosing a hardened base image: slim, distroless, Docker Hardened Images, Chainguard; non-root, pinned versions and regular rebuilds.
Guides & insights
A library for curious minds
Observability
Scanning Docker images: Trivy, Grype and Docker Scout
Detect image vulnerabilities and misconfigurations with Trivy, read results, filter what is fixable and block CI.
Observability
SBOM: the component inventory of your images
Generate a CycloneDX or SPDX SBOM, rescan it without rebuilding and know in seconds which images a new flaw affects.
Containers
Docker best practices: images, runtime, security and operations
Docker best practices: Dockerfile and multi-stage builds, minimal and reproducible images, unprivileged execution, resource limits, secrets, vulnerability…
Cloud computing
Compute on OVHcloud: Public Cloud instances and Managed Kubernetes Service
Choose and use OVHcloud compute: instance ranges (General Purpose, CPU, RAM, GPU, Discovery), images and cloud-init, snapshots, Managed Kubernetes Service…
DevOps
Containers, Kubernetes and cloud native in a DevOps approach
The role of containers and Kubernetes in DevOps: reproducible images, multi-stage Dockerfiles, registries, orchestration, Helm and Kustomize, cloud native…
Containers
Docker: overview, architecture and first steps
Discover Docker: containers vs virtual machines, client/daemon/registry architecture, images and layers, essential commands, Dockerfile, volumes, networks…
Containers
Docker cheat sheet: the essential commands
A practical guide gathering all the essential commands to handle images, containers, volumes and Docker Compose day to day.
Learning never stops