3 ms·
Yeah, this is a good summary of the problem. If I write a dockerfile with FROM ubuntu:20.04 WORKDIR /app ADD mySecretAppBinary . it will pull the
by maccard 4y ago
Yeah, this is a good summary of the problem. If I write a dockerfile with
FROM ubuntu:20.04
WORKDIR /app
ADD mySecretAppBinary .
it will pull the base image from hub.docker.io, and there is no way to stop it from doing so. If I run:
image_tag = test-app
docker build -t $image_tag .
docker push $image_tag
it will push a container with my secret application to the public docker hub, assuming I am logged in (which of course I am, because docker rate limits you if you don't). I don't ever want to do that, ever, under any circumstances, and it's just not possible to opt out of whiel using docker.