Videos / DevOps

Episode 7 of 14 · DevOps, end to end

Docker: building an image you would trust in production

Chapters

1. The ticket window0:00
2. Image, then container0:15
3. How layers stack0:32
4. Not a virtual machine0:50
5. What docker run does1:08
6. Tags move, digests do not1:25
7. A Dockerfile, top to bottom1:43
8. A row of dominoes2:02
9. The ordering mistake2:18
10. Rarely first, often last2:37
11. Layers only ever add2:56
12. What you send the daemon3:13
13. Shipping the workbench3:30
14. A second FROM resets it3:47
15. What the artefact needs4:05
16. The base image ladder4:22
17. Alpine's other libc4:43
18. Distroless, and no shell5:02
19. A sealed room, one door5:19
20. Bind mounts and volumes5:37
21. The writable layer is not storage5:55
22. A build argument is not a secret6:10
23. Stop, then kill6:28
24. Draining on purpose6:46
25. The cue sheet7:04
26. What is in the file7:22
27. Names on a network7:40
28. Started is not ready7:59
29. What compose is best at8:18
30. Where compose stops8:36
31. Root, by default8:56
32. Secrets never go in a layer9:13
33. Pin the base9:32
34. Scan where you build9:50
35. Take away what it never uses10:07
36. All of it, one file10:26
37. The whole thing10:46

Docker: building an image you would trust in production. Think of a ticket window. You slide a request through the slot, and the workshop behind it does the work. That is Docker. The command you type is a client. It posts to a daemon ove

Mark as watchedSaved in this browser only.