Image Optimization and Security

Part of the Docker course

Almost no production incident involving Docker is a Docker bug. The recurring pattern is much duller: an image built from node:latest two years ago, running as root, 900MB, carrying every known vulnerability in a distribution nobody has updated, because it worked on the day it was built and nothing since then has said otherwise.

None of the fixes are difficult. They are four habits, each worth a few lines in a Dockerfile, and together they remove most of the risk and most of the size. This lesson is those four habits and the tools that check them. ...