Docker

Use Clair to scan Docker images for vulnerabilities

Docker provides a docker hub that allows users to upload the created images for other users to download and quickly build the environment. But it also brings some security issues. The downloaded image is maliciously implanted into the backdoor, the image is tampered with during transmission, whether the environment built by the image contains loopholes, etc.

Build Go Dockerfile

Every time I start a new Go project, I repeat many steps. Like setting up .gitignore, CI configuration, Dockerfile,...so I decided to have a baseline Dockerfile like this

Vulnerability scanning of Docker images

Even if you have strong host-level security, infected containers can give attackers a foothold in your system. You can reduce this risk by using Docker Bench and active container vulnerability scanners such as Docker scan (snyk), Grype, Trivy, and Clair. These will help you identify issues in the container, such as outdated dependencies that may be exploited.

Running macOS in Linux with Docker-OSX

Your CPU should support virtualization such as Intel VT or AMD-V. Enable it in your BIOS/UEFI before continuing. (For example, on my Ryzen system, this is an "AMD SVM" setting that must be enabled in the BIOS.)

Docker Assignment ghostwriting

√【Reliable】Taobao diamond seller & paypal gold seller, support Ant Huabei and credit card, √【Word of mouth】deliver the code/answer first, help the customer to make up the balance after the check runs correctly, √【commitment】code local Can't run, full refund. Because of professionalism, so self-confidence

5 Docker Best Practices

Docker best practices that will help us optimize images for better size, security and developer experience

Docker macvlan network container bridge host network segment independent IP

By default, each macvlan can communicate with each other, but cannot communicate with the host! ! The reason for this is that intercommunication is prohibited for security. For example, the host machine pings the ip of the container. Although they belong to the same network segment, they cannot be pinged, and vice versa.

CentOS uses Docker to deploy opengrok

OpenGrok is a fast, easy-to-use source code search and comparison engine. It helps you search, compare, and locate your source tree. It understands various program file formats and version control history

Use Docker to build poste, self-built mail server

The self-built email service is not limited by the amount of emails sent, and the cost of sending emails in batches is lower, but the deployment is relatively complicated and it is easy to go into the trash. However, more and more service providers have already developed products that support one-click deployment, which greatly reduces the difficulty of deployment and use.