5 ms·
In general this article was very disappointing. With the exception of suggesting using tini as an entry point, this article adds nothing beyond the very basic a
by rualca 6y ago
In general this article was very disappointing. With the exception of suggesting using tini as an entry point, this article adds nothing beyond the very basic advice of not running stuff at root.
There's no mention of multi-stage builds, labelling images, using env variables to pass ephemeral config settings, setting up tmpfs folders to avoid cluttering containers with temp data, the importance of rebuilding images periodically... In short, the basics.
Edit: this stuff is already covered by Docker in it's official Dockerfile best practices guide.
https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ https://docs.docker.com/develop/develop-images/dockerfile_be...
I was expecting far more from an article on HN about Dockerfile best practices, particularly one which is currently being listed so prominently. I mean, does the HN crowd need a top ranking link to be reminded that we should not be running external-facing services as root?
- LucidLynx 6y agoDo not hesitate to contribute then... -> https://github.com/hexops/dockerfile/pulls https://github.com/hexops/dockerfile/pulls
- rualca 6y ago> Do not hesitate to contribute then... This info is quite literally made available by Docker itself in the form of it's official best practices guide, which exists for years now. https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ https://docs.docker.com/develop/develop-images/dockerfile_be... How is anyone publishing a so-called best practices guide when they aren't even aware of the stuff covered by the official best practices guide?
- Gigablah 6y agoYou're hastily assuming that they "aren't aware" when they could have simply chosen to avoid redundancy.
- radicalbyte 6y agoBecause they can post something wrong, get the real experts on HN to fix it, then they can use their now awesome repository to sell consultancy service as one of the biggest Docker experts in the world. :-)