LALetDraw Appinletdraw.hashnode.dev·4d ago · 10 min readHow to Diagram a Docker Compose Stack (and What depends_on Really Means)Disclosure: I build LetDraw, a diagram tool. The last section shows how I generate Compose diagrams with it. Everything before that works with nothing but the Docker CLI and any drawing tool. A docke00
MMuzasioinmuzasio.hashnode.dev·5d ago · 13 min readContainers Are Isolated, But They Still Share the KernelNamespaces, capabilities, seccomp, and two 2026 kernel vulnerabilities that show where Docker isolation ends Containers are lightweight because they do not run their own kernel. They can have their ow00
RSRobin Sishodiainsishodiarobin.hashnode.dev·6d ago · 4 min readDockerfile Best Practices: Smaller, Faster and Safer ImagesWriting a Dockerfile that works is easy. Writing one that builds fast, produces a small image and doesn't run as root takes a few habits. Here are the ones that made the biggest difference for me. 1. 00
SKShubham Kumarinin4c04er.hashnode.dev·Oct 2 · 5 min readContainers vs Virtual Machines: How They Actually DifferContainers are lightweight VMs is the most common explanation, and it's misleading. They isolate workloads at completely different layers, and that difference drives everything else: speed, size, secu10
SHSanskriti Harmukhinvultr.hashnode.dev·Sep 30 · 4 min readManaging Docker ImagesA Docker image is a self-contained package that includes everything needed to run a software application — code, runtime, libraries, environment variables, and configuration files. Images are built in00
YYuvraj.Rinbuild-break-fix-diaries-with-yuvrajj.hashnode.dev·Sep 29 · 4 min readDocker Multi-Stage Builds: How I Reduced My Image SizeLearn how Docker Multi-Stage Builds help create smaller, cleaner, and more efficient container images. 🤔 Why Do We Need Multi-Stage Builds? When I started learning Docker, I came across a simple ques00
KTKhushi Trivediinkhushitrivedi.hashnode.dev·Sep 28 · 7 min readThere's No Shell, So There's Nothing to Pivot IntoThe strongest argument for a shell-less image is not a feature list. It is what happens to an attacker who just got code execution inside your container and then checked what they could do with it. Mo00
SSunnyinsunny-snskarora.hashnode.dev·Sep 27 · 15 min read📦 One File, Twenty-Five Images, Part 1/2 - The DesignHey all 👋 Here is a problem that sounds boring until you try it: move twenty-five container images from one world to another, where the two worlds share no network. Source registry on one side, Artif00
PKPatrick Kearnsinfullstackcity.com·Sep 26 · 8 min readHow to Investigate a Growing Container Without GuessingA .NET container uses 600 MB after startup, 850 MB by lunchtime and 1.2 GB by the end of the day. Someone calls it a memory leak and asks for a heap dump. The graph has established that memory use is 00
DCDavid Cletusindavidcloudjourney.hashnode.dev·Sep 26 · 14 min readDockerizing a Node App & Shipping It to Azure: Build, Break, Fix & Ship (3 Errors, Zero Regrets) 🐳 What we're building A small Node.js/Express app with three routes: a homepage, a /health check, and a /api/vibe endpoint that returns a random theme A Docker image for it, tested locally The imag02I
