docker – Page 4 – Türker Yıldırım

Compose v1 reaches end of life, and the alias that hid it

NoteFebruary 21, 20242 min read

A shell alias mapping docker-compose to docker compose, added in 2021, which meant nobody noticed the old binary was still installed and still being used by two scripts.…

Reproducing a build from six months ago

Deep diveJanuary 4, 202414 min read

A security question about a release from July, and no way to rebuild it. The same commit produces a different image, and neither of them is wrong.

A compose profile for the services nobody runs locally

NoteOctober 27, 20232 min read

A stack of eleven services where four are needed by two people occasionally, started by everybody constantly. Memory is the reason: the search pair was 2.4 GB on…

Healthchecks that check the thing, not the port

NoteOctober 24, 20232 min read

A container health check that opened a TCP connection to 9000 and reported healthy while every request returned a 500. A port check answers “did the process start”,…

docker compose watch, and the bind mount it replaces

NoteJune 4, 20232 min read

A bind mount of the whole project into the container is the standard local setup and is the reason the stack is slow on some machines. The difference…

Rebuilding the deploy as something a stranger could run

Deep diveMay 16, 202314 min read

A deploy that one person can run, and a holiday booked for August. A runbook of 22 steps, four of which say “check it looks right”.

COPY –link, and the layer that stopped being rebuilt

NoteApril 25, 20232 min read

A COPY rebuilds if any earlier layer changed, even when what it copies is identical — –link breaks that chain. The mechanism is that a linked copy creates…

A backup we restored on purpose, every month, forever

Deep diveApril 5, 20238 min read

A backup that had run nightly for four years and had never been restored. The first restore produced a database missing one table.

BuildKit as the default engine builder in 23.0

NoteMarch 29, 20232 min read

The default has been BuildKit in Docker Desktop for a while and 23.0 makes it the engine default, which quietly changes what a plain build does. The skipped-stage…

A base image we build ourselves, and the CVE report that paid for it

Deep diveMarch 15, 202310 min read

A scanner reporting 41 vulnerabilities, 39 of them in packages we do not use. A weekly report that has never once been actionable.