Tag: docker

Trivy, Grype, and Docker Scout go head-to-head on speed, CVE coverage, CI integration, and cost. Pick the right scanner for your home lab or pipeline.

Authelia is a bouncer. Authentik is the whole security desk. Pick the right self-hosted SSO for your home lab, with working configs, gotchas, and a migration path.

Disqus is a tracker farm wearing a comment box costume. Here's every real alternative, self-hosted and SaaS, and which one actually fits your blog.

Per-container control over Docker image updates with labels. Auto-update or notify via Discord, Slack, ntfy, no sidecar needed.

Distroless containers are tiny, secure, and loved by security teams, until you need to debug one at 2 AM. Here's when Google distroless actually pays off vs when it's just container hipster points.

A honeypot sits quietly on your network pretending to be valuable. Touch it and you've found an intruder. Deploy OpenCanary in Docker, dead simple.

Docker Desktop got expensive and RAM-hungry. Colima is the lean alternative. OrbStack is the one everyone's actually using now. Here's the honest breakdown for Mac developers.

Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.

Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.

ELK does everything and wants all your memory. Loki does logging the Prometheus way, label indexes, not content, and runs on a fraction of the resources. Here's the honest comparison.

No port forwarding, no DDNS drama. Real cloudflared config: multiple services per tunnel, Access policies, origin TLS, and what Cloudflare can actually see.

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.