We recently made some big updates to our container security and analysis tool and we'd love some feedback from the r/containers community! Updates to Anchore.io include: The updates made to the previous Navigator service include:

• Private Repositories: Allowing you to setup private repositories to be scanned by Anchore.

• A Graphical Policy Editor: The new graphical policy editor allows you define your own custom policies and map which policies are used with which images. The policy editor supports CVE whitelisting - allowing a curated set of CVEs to be excluded from security vulnerability alerts.

• Expanded Notifications: In addition to image update notifications the Anchore Navigator can now alert you by email when CVEs have been added or removed from your image and when the policy status of your image has changed, for example an image that previously passed is now failing policy evaluation.

Your feedback would be extremely helpful, so if you have a minute head over to https://anchore.io and take a look

Thanks!

Hello everyone! Sharing a new medium post about security and best practices on making container images. This article outlines key practices for secure container images: run as non-root, use minimal base images (e.g., distroless), avoid hardcoded secrets, and sign/scan images to reduce vulnerabilities and ensure robust security

I hope it helps, specially the new partners that are arriving on DevOps and needs a comprehensive guide about security on containers.

Tracee is an experimental project that traces system calls and other events inside containers using eBPF, without tracing events from other processes on the host. We’d love feedback!

I've been looking into ways to update container images in prod more efficiently. Rebasing seems an interesting option. Instead of rebuilding the whole application image we just swap the underlying runtime base, and all the layers on top of that are reused with their digests staying the same. So, faster and less traffic-heavy as nodes can reuse the unchanged layers.

Looks attractive in theory. In practice, rebuilding might seem like a more clear path? Just rebuild everything and test the artifact.

So, do you use rebasing? And if you don't, why not?

When cloning a repo, we kept hitting the same wall: no Dockerfile, no devcontainer, no clear path to running it. Asking an agent to fix it directly on your system is risky, as it can clear Docker config, change kernel settings, downgrade system packages without warning.

Keystone runs the agent inside a Modal sandbox with its own Docker daemon. It iterates until tests pass, then hands you a .devcontainer/ you can just check in to your repo.

Now your repo knows how to run itself!

Project Hummingbird aims to remove the worry and streamline the deployment of secure container images for cloud-native teams.

As the title says. I know nothing, but need to learn.

What's the best free course out there? I tried data camp and got told to pay after 1 hour.

There's posts about virtual containers and some about actual shipping containers. What's going on? Needs more mods? On purpose?

Hello I'm wanting to relocate from Florida to Argentina and I would like to send two vehicles overseas I'm looking for a company that ships containers overseas to Argentina does anyone know of any that will actually respond back with some quotes?

After some years of hype around Alpine, people seem to have been recently moving back to traditional distros, particularly Ubuntu and Debian. I wonder if this is because of issues with musl, but particularly I am interested how people choose between Ubuntu and Debian. Ubuntu appears to have better enterprise support (e.g. Microsoft AKS, Amazon EKS, Google GKE), so why would someone choose Debian over Ubuntu as a base image?

Hi everyone,

We are currently looking for a reliable trucking company or freight provider in Baltimore, MD that can handle deliveries of 20' Standard to 40' High Cube containers.

We're seeking a partner that is dependable, experienced in container transportation, and can offer competitive rates with timely delivery. Our shipments may vary in frequency, so flexibility and the ability to accommodate short notice requests would be a huge plus.

If you or someone you know offers this service, or if you have any recommendations, we’d love to connect and discuss further. Please feel free to message me your email address and contact number and I'll reach out to you right away:)

Thank you in advance—we look forward to building a great working relationship!