Difference between revisions of "Docker Best Practices"
From Gcube Wiki
Manuele.simi (Talk | contribs) (→Dockerfile) |
Manuele.simi (Talk | contribs) |
||
Line 10: | Line 10: | ||
Which ones we can use? Which repos/organizations do we trust? | Which ones we can use? Which repos/organizations do we trust? | ||
− | == Labels == | + | == Use Metadata Labels == |
− | == Maintainers == | + | == Define the Maintainers == |
− | == Users inside the Image == | + | == Which Users inside the Image == |
− | == | + | == Define the App Name == |
+ | |||
+ | == Define the WORKDIR == | ||
+ | |||
+ | == Use COPY instead of ADD == | ||
+ | |||
+ | == Minimize the Image Size == | ||
+ | |||
+ | = Build the Image = | ||
− | |||
== Tags == | == Tags == | ||
+ | Use fixed tags for immutability. | ||
− | == | + | == Automate == |
− | == | + | == Push == |
− | = | + | = Test the Images = |
− | = | + | = Find, Fix and Monitor for Image Vulnerabilities = |
Revision as of 16:50, 14 August 2020
Contents
Repositories
Setting up a DTR or Docker Hub? Single User vs Organization?
Dockerfile
Where to keep the Dockerfile
Base/Composed Images
Which ones we can use? Which repos/organizations do we trust?
Use Metadata Labels
Define the Maintainers
Which Users inside the Image
Define the App Name
Define the WORKDIR
Use COPY instead of ADD
Minimize the Image Size
Build the Image
Tags
Use fixed tags for immutability.