Apple Silicon arrived in November and a team suddenly has two architectures, which means an image built on a laptop may not run on the server. The arm64…
Passing a private repository token as a build argument writes it into the image history, where docker history reads it back out for anyone who can pull the…
A secret in an environment variable is visible in docker inspect, in the process environment and in any crash dump that prints the environment. The _FILE convention is…
A database that takes forty seconds to initialise is marked unhealthy during every normal start, which trains everyone to ignore health status. start_period is the flag that makes…
The question was how to deploy four services, and the answer arrived before it. Naming what you actually need — scheduling, health, rolling deploys, secrets.
A multi-stage Dockerfile can serve development and production from one file, provided the build is told where to stop. The last form is the one worth remembering, because…
Mounting /var/run/docker.sock into a container to let it build images is equivalent to giving that container root on the host, and it is presented in most CI documentation…