Docker Best Practices
From Gcube Wiki
Revision as of 13:36, 15 August 2020 by Manuele.simi (Talk | contribs)
Contents
Docker Repositories
Setting up a DTR or Docker Hub?
Single User vs Organization?
Layout of a Docker-enabled Project
Base/Composed Images
Which ones we can use? Which repos/organizations do we trust?
Dockerfile
Use Metadata Labels
Define the Maintainers
Which Users inside the Image
Define the App Name
Define the WORKDIR
Use COPY instead of ADD
Sensitive Information
Never add passwords, hostnames, externals paths, tokens, and keys into images. Use a .dockerignore file to avoid a hazardous COPY instruction, which pulls in sensitive information from the build context.
Minimize the Image Size
Build the Image
Tags/SHAs
Use fixed tags for immutability.
