Tag: containers

Colima vs OrbStack vs Docker Desktop on Mac

Docker Desktop got expensive and RAM-hungry. Colima is the lean alternative. OrbStack is the one everyone's actually using now. Here's the honest breakdown for Mac developers.

SBOMs and Supply Chain Security

A Software Bill of Materials tells you exactly what's in your software. Syft generates one, Grype scans it for CVEs. Together they're your supply chain paper trail.

Container Security: Scan and Sign Your Images Like You Mean It

Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.

Falco: Catch Container Attacks at Runtime

Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.

Trivy + Cosign: Scan and Sign Your Images

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.

Docker BuildKit: Stop Building Images the Slow Way

Cache mounts, secret mounts, parallel stages, BuildKit turns your Dockerfile from a slow linear disaster into something that actually respects your time.

Podman Quadlets: Systemd-Native Containers

Podman Quadlets turn containers into real systemd services using .container unit files, no daemon, no hacks, just clean native integration.

Rootless Docker: Run Without Root

Run Docker containers without root privileges, here's the security difference, the install steps, and the gotchas nobody tells you about.

Docker Networking Demystified

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan, with real Compose examples.

Lazydocker & Dive: Fix Your Docker CLI

Learn how lazydocker and dive make Docker manageable from your terminal. TUI dashboards, image layer analysis, CI integration, and optimization tips.

ctop and lazydocker: Docker Monitoring Tools

Forget docker stats. ctop and lazydocker give you real-time container insights with less friction than typing commands.

Private Docker Registry with Harbor

Stop letting Docker Hub throttle your CI/CD. Run Harbor for RBAC, Trivy scanning, image replication, and a real UI, on infrastructure you control.