Back to tags
#docker
images, layers, and the cache miss that just cost you twelve minutes.
3 blog posts · 2 TILs.
Posts on the gap between a Dockerfile and a running process. The hardening post is the baseline: stop running as root, drop capabilities, and set the rest of the defaults once. SimpleLogin is a full Compose deployment with Postfix and a TLS trust trap that eats an afternoon. The two short notes cover the .dockerignore gotcha that silently busts your build cache, and how to find where a volume's data actually lives on disk when the container insists the directory is empty.
Blog posts
A CI runner starts with an empty layer store, so every build is a first build. Cache mounts, instruction order, and an exported cache fix it in about ten…
How to self-host SimpleLogin with Docker, Postfix and Brevo on a $3/month VPS. DNS, reply-from-alias, and the TLS gotcha that ate two hours of my Sunday.
Your containers are probably insecure. Here's how I learned to harden Docker containers the hard way, and the security mistakes that almost cost us.
Today I learned
Volume mounts that look right but won't persist data. The five-command inspection sequence that always tells me which mount is actually being read.
Docker builds slow despite a clean layer order? Your .dockerignore is probably letting files bust the cache on every commit. The two-line fix.