Skip to Content
Tutorials

DevOps

DevOps tutorials for people who want an app to run the same way on every machine, not only on the one it was written on. Learn what each command does before you trust it. A copied command runs just as happily when it is wrong.

Any category DevOps5 Docker 5
Any topics Deployment and Containers 11 Performance Optimization 3 Security 5 Testing and Debugging 1
Any level Intermediate 2 Advanced 5
DevOps Security Advanced Clear filters 5 results
0 likes
Run the Container as a Non-Root User

Add a user to an image, give it only the folder it writes to, and fix the two permission errors you will most likely hit. After this, your containers stop running as root.

4 min read
0 likes
Pin a Base Image by Digest

Look up a base image digest, pin it in the FROM line, check the build used it and plan how to update it. After this, your builds are repeatable without missing security fixes.

3 min read
0 likes
Log In to a Private Registry From CI

Log in to a password-protected registry the way a CI job should, push an image, log out, and see the GitHub Actions version. After this, CI logins stop leaking tokens.

4 min read
0 likes
Read-Only Root Filesystem With a Writable tmpfs

Find where an app writes, run it read-only, and give it a tmpfs for scratch files and a volume for data. After this, nothing inside the container can change its own files.

4 min read
0 likes
Export an SBOM or Scan Result From a Real Build

Export an SPDX SBOM from a real build, list its packages and scan it with Grype, without a Docker account. After this, you can hand over what is in an image and what was known about it on a given day.

6 min read