Skip to Content
E-Learning

Tutorials

Practical tutorials for the work we actually do. Pick one, read it in order, and apply it.

Any category DevOps5 Docker 5
Any topics APIs and Integrations 7 Automation and Scripting 3 Data Structures and Algorithms 2 Databases 11 Deployment and Containers 14 Object-Oriented Programming 3 Packaging and Dependencies 5 Performance Optimization 24 Programming Patterns 10 Security 5 Testing and Debugging 10 Type Systems 14 Web Development 15
Any level Beginner 1 Intermediate 2 Advanced 5
Security Advanced Clear filters 5 results
0 likes
Run the Container as a Non-Root User

Add a user to an image, give it only the folder it writes to, and fix the two permission errors you will most likely hit. After this, your containers stop running as root.

4 min read
0 likes
Pin a Base Image by Digest

Look up a base image digest, pin it in the FROM line, check the build used it and plan how to update it. After this, your builds are repeatable without missing security fixes.

3 min read
0 likes
Log In to a Private Registry From CI

Log in to a password-protected registry the way a CI job should, push an image, log out, and see the GitHub Actions version. After this, CI logins stop leaking tokens.

4 min read
0 likes
Read-Only Root Filesystem With a Writable tmpfs

Find where an app writes, run it read-only, and give it a tmpfs for scratch files and a volume for data. After this, nothing inside the container can change its own files.

4 min read
0 likes
Export an SBOM or Scan Result From a Real Build

Export an SPDX SBOM from a real build, list its packages and scan it with Grype, without a Docker account. After this, you can hand over what is in an image and what was known about it on a given day.

6 min read