DEVSECOPS Talks #17-2020 - Best Practices for Building Docker Images

The DevSecOps Talks Podcast

Player FM - Internet Radio Done Right

16 subscribers

הוסף לפני four שנים

תוכן מסופק על ידי Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin, Mattias Hemmingsson, Julien Bisconti, and Andrey Devyatkin. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin, Mattias Hemmingsson, Julien Bisconti, and Andrey Devyatkin או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/the-vanished">The Vanished</a></span>

1
The Vanished

בטל רישום

לפני 4 weeksלפני 4w ago

בטל רישום

חודשי

Join us on a journey into the perplexing world of disappearances, where individuals vanish without a trace, leaving behind a void filled with questions and speculation.

לפני 5 שנים 33:28

MP3•בית הפרקים

This is the first episode in the new format - 30 minutes short and crisp episodes, i.e., less water and side discussions, focusing on the topic, duration under (well, almost under) 30 minutes. We hope you like it!

The topic of this episode is building docker images - automation, security, best practices.

In this episode, we discuss:

Saving money with T3a family
Building Docker images locally and in CI
Setting up deamonless Docker builds for CI and k8s
Using multistage builds to keep your images nice and clean as well as encapsulate the build environment and make it portable
Passing secrets to Docker build and inspecting image layers for secrets (ssh-agent and many more)
Keeping Docker images updated with dependencies and updates
Scanning Docker images for vulnerabilities
Docker image layers caching - doing it right
DockerHub is to delete old images stored for free, and GitHub is ready to host them for you
Docker image naming so you can find all you need to debug quickly

In some of the information overlaps with episode #3 but greatly extends information provided before https://devsecops.fm/episodes/docker-secure-build/

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

80 פרקים

#Tech #Andrey Devyatkin #Julien Bisconti #Mattias Hemmingsson

DEVSECOPS Talks #17-2020 - Best Practices for Building Docker Images

The DevSecOps Talks Podcast

16 subscribers

published לפני 5 שנים

שתפו

MP3•בית הפרקים

The topic of this episode is building docker images - automation, security, best practices.

In this episode, we discuss:

Saving money with T3a family
Building Docker images locally and in CI
Setting up deamonless Docker builds for CI and k8s
Using multistage builds to keep your images nice and clean as well as encapsulate the build environment and make it portable
Passing secrets to Docker build and inspecting image layers for secrets (ssh-agent and many more)
Keeping Docker images updated with dependencies and updates
Scanning Docker images for vulnerabilities
Docker image layers caching - doing it right
DockerHub is to delete old images stored for free, and GitHub is ready to host them for you
Docker image naming so you can find all you need to debug quickly

In some of the information overlaps with episode #3 but greatly extends information provided before https://devsecops.fm/episodes/docker-secure-build/

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

80 פרקים

#Tech #Andrey Devyatkin #Julien Bisconti #Mattias Hemmingsson

Alle afleveringen

1
#80 - Understanding Passkeys: Benefits And Limitations 36:55

לפני 5 weeks36:55

36:55

Passkeys are gaining attention as a new way to log in without passwords. How do they work, and how do they compare to traditional multi-factor authentication (MFA)? In this episode, we explore the history of passwords, the strengths and weaknesses of common MFA methods, and the potential of passkeys to enhance security. What threats do passkeys mitigate, and what still remain? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#79 - Going Local: What’S Driving The Move? 20:31

לפני 9 weeks20:31

20:31

Andrey, Paulina, and Mattias kick off a miniseries on European infrastructure. We talk about infrastructure providers' options across Europe, ask what really drives the move away from hyperscalers, and wonder whether the trade-offs make sense for most teams. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#78 - Building AI Tools For IaC Compliance 41:12

לפני 11 weeks41:12

41:12

In this guest episode, we chat with Davlet Dzhakishev, co-founder of Cloudgeni, who’s working on an AI-powered approach to fixing compliance issues in IaC. What’s the state of tools in this space? Where does his idea fit in? And how should we think about the relationship between compliance and security? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#77 - Chaos Engineering Explained: Part 2 34:30

לפני 13 weeks34:30

34:30

Part two of our chaos engineering series is here! Join Andrey, Mattias, and Paulina as they talk through practical strategies for chaos engineering. Who should do it? How can you start? And what are the essential prerequisites? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#76 - Chaos Engineering Explained: Part 1 26:29

לפני 15 weeks26:29

26:29

Chaos engineering—is it really chaos, or something more structured? Andrey, Paulina, and Mattias talk about what chaos engineering means, how it started, and why you might already be using it unintentionally. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#75 - Learning from the Crisis: Post-Incident Actions 24:18

לפני 17 weeks24:18

24:18

This is the final episode of our three-part series on incident response. We focus on what happens after the dust settles. How do you learn from what went wrong and avoid repeating it? Tune in to hear our top recommendations. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#74 - From Preparation To Execution: Handling An Active Incident 27:50

לפני 20 weeks27:50

27:50

What keeps an incident from spiraling out of control? How can you organize your team on the spot? We continue our series on incident response, moving from preparation to real-time actions. Mattias shares key points from his course. Listen to learn how we handle incidents step by step. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#73 - Incident Response: Key Preparations You Need 38:23

לפני 22 weeks38:23

38:23

Incident response can be complex, but where do you start? Andrey, Mattias, and Paulina dive into the preparation steps you need to take. Mattias shares his expertise from teaching an incident response course. What’s their top recommendation? Listen and find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#72 - AWS Resource Control Policies (RCPs) 21:25

לפני 24 weeks21:25

21:25

We are looking into recently announced AWS Resource Control Policies. What are they? How are they different from Service Control Policies? What is a Data Perimeter? Tune in to find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#71 - Unpacking The Dora Accelerate State Of Devops Report 40:49

לפני 27 weeks40:49

40:49

In this episode, Andrey, Mattias, and Paulina break down the new DORA Accelerate State of DevOps report. What’s changed since the last report? What do these insights mean for your team? Tune in for our insightful conversation! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#70 - System Initiative Goes Ga 40:26

לפני 30 weeks40:26

40:26

Andrey, Mattias, and Paulina are joined by Paul Stack, an IaC tools developer and a frequent guest on the show. He’s back to discuss the general availability of System Initiative and share what has changed since his last visit when they talked about the early beta of the tool. Will this be a revolution or evolution in Infrastructure as Code tooling? Do we really need collaborative infrastructure management tools? Tune in to find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#69 - Who Is Paulina? 42:16

לפני 33 weeks42:16

42:16

Join Andrey and Mattias as they sit down with Paulina Dubas, an independent DevOps consultant and public speaker. Who is Paulina, and what experiences does she bring to the table? What topics particularly resonate with her? Tune in to learn more about Paulina since we have a feeling that she is here to stay Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#68 - Julien’s Last Episode? 27:16

לפני 36 weeks27:16

27:16

Julien shares big news with co-hosts Mattias and Andrey. What led to his decision to step down? And what does the future hold for him? Tune in for the off-boarding interview as we look back at the past four years and 60+ episodes we did together! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#67 - Building MVP On AWS 29:53

לפני 38 weeks29:53

29:53

Join Andrey, Julien, and Mattias in this episode of DevSecOps Talks as they delve into building Minimum Viable Products (MVPs) and selecting the best solutions for them. Andrey goes first and, as an AWS consultant, kicks off the discussion by outlining his preferred AWS services for MVP development. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

1
#66 - Multi-Account Strategy And Landing Zones: Account Segmentation Approaches For Security And Efficiency On AWS 58:14

לפני 1 year58:14

58:14

In this episode of DevSecOps Talks, co-hosts Andrey, Julien, and Mattias are joined by AWS Consultant Fernando Gonçalves to explore the complexities of AWS organization and account segmentation. Get insights into the debate over development, stage, and production accounts versus micro-segmentation. Don’t miss Julien's take on why he believes staging is a waste of time and money, as well as Fernando’s explanation of what the AWS Landing Zone is. Learn about the tools provided by AWS for multi-account management and the pros and cons of various account segmentation approaches. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.

תקשיבו ל-500+ נושאים

16 subscribers

דומה לThe DevSecOps Talks Podcast

Bounty Paper Towels Quick Size, White, 16 Family Rolls = 40 Regular Rolls (Packaging May Vary)

Microsoft Office Home 2024 | Classic Apps: Word, Excel, PowerPoint | One-Time Purchase for 1 PC/MAC | Instant Download | Formerly Home & Student 2021 [PC/Mac Online Code]

Norton 360 Premium 2025, Antivirus software for 10 Devices with Auto-Renewal – Includes Advanced AI Scam Protection, VPN, Dark Web Monitoring & PC Cloud Backup [Download]

פודקאסטים ששווה להאזין

The DevSecOps Talks Podcast « » DEVSECOPS Talks #17-2020 - Best Practices for Building Docker Images

DEVSECOPS Talks #17-2020 - Best Practices for Building Docker Images

פודקאסטים ששווה להאזין

ברוכים הבאים אל Player FM!

Apple Watch Series 10 [GPS 46mm case] Smartwatch with Jet Black Aluminium Case with Black Sport Band - M/L. Fitness Tracker, ECG App, Always-On Retina Display, Water Resistant

Hanes Mens Double Tough Socks, 12-pair Pack Crew Socks, White/Grey Foot Bottom, 6-12

Apple Watch Ultra [GPS + Cellular 49mm] Titanium Case with Midnight Ocean Band, One Size (Renewed)

דומה לThe DevSecOps Talks Podcast

מדריך עזר מהיר

The DevSecOps Talks Podcast « »
DEVSECOPS Talks #17-2020 - Best Practices for Building Docker Images