Top 8 Docker Best Practices for using Docker in Production

8 Docker Production Best Practices to improve security, reduce the image size and improve build time

► This video is sponsored by Kasten 🙌🏼

Docker adoption rises constantly, but not everyone is using Docker according to the best practices.

So in this video I want to show you 8 ways you can use docker in a right way in your projects to improve security, optimize the image size and take advantage of some of the useful Docker features and also write cleaner and more maintainable Dockerfiles.

▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬
0:00 - Intro
0:34 - BP 1: Use official and verified Docker Images as Base Image
1:13 - BP 2: Use Specific Docker Image Versions
2:12 - BP 3: Use Small-Sized Official Images
4:35 - BP 4: Optimize Caching Image Layers
10:09- BP 5: Use .dockerignore file
10:55 - BP 6: Make use of Multi-Stage Builds
14:15 - BP 7: Use the Least Privileged User
16:06 - BP 8: Scan your Images for Security Vulnerabilities
17:50 - Wrap Up

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬

▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬

▬▬▬▬▬▬ Courses & Bootcamp & Ebooks 🚀 ▬▬▬▬▬▬

[TechWorldwithNana]

▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬
0:00 - Intro
0:34 - BP 1: Use official and verified Docker Images as Base Image
1:13 - BP 2: Use Specific Docker Image Versions
2:12 - BP 3: Use Small-Sized Official Images
4:35 - BP 4: Optimize Caching Image Layers
10:09- BP 5: Use .dockerignore file
10:55 - BP 6: Make use of Multi-Stage Builds
14:15 - BP 7: Use the Least Privileged User
16:06 - BP 8: Scan your Images for Security Vulnerabilities
17:50 - Wrap Up


▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬


▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬


▬▬▬▬▬▬ Courses & Bootcamp & Ebooks 🚀 ▬▬▬▬▬▬

[koenbrink]

One thing I would like to add about the caching is that it can sometimes screw over your buiild. It is therefore actually advised by Docker to always test your Dockerfile with the --no-cache flag every once in a while (for example with Github Actions or automatated build testing, a good idea would be to use --no-cache) in case you are for example building external files. In that case, a layer like "git clone ..." can be cached, but if the files in that repository change, it will still use the cached layer because the command did not change.

Great video as always

[pedroansilva]

I love the way you present your content in such a concise, but technically accurate manner. Congratulations and thank you for sharing Nana.

[prayagsingh]

The way you explained everything in this video is not just amazing but super easy to understand too. Thank you so much for this wonderful video. You are awesome.

[ayencoscolfield]

Always win me over with her charisma, quality display of intellect and explanations on topical issues, this is another excellent work. Thanks Nana you are easily my champion

[rusasd]

Awesome video! I spent tons of hours on the official documentario about caching layers and I couldn't figure out how it works, now you made me understand in three minutes, I love you!

[anuragbapat]

Thank you Nana! Never missed any of your videos on Docker or Kubernetes. You are one of the best out there!

[sachinpandey]

Another great video!! Always learn a lot from your videos!! You really do a great job of simply explaining core concepts!

[JesseSteinfort]

This video is fantastic. The tips go from basic to advanced so don't stop just because it seems like the tips are common sense. I'm in the middle of my docker journey and have one application in production right now. I found these tips to be useful and include things that I need to implement in my existing app and in others in the future. Thank you for this video.

[syskiessistemasit]

Hi Nana!! Your videos are always a huge contribution! The way you detail the topics is fantastic! applause for your channel! At some point it would be good, best practices for docker-compose, you are well nana greetings!

[Das_KBob]

I am surprised that nobody mentioned docker secrets and sensitive data in general; You should NOT run commands that have passwords/api tokens as parameters (as they would show up in the history) and you should also NEVER copy sensitive unnecessary files (e.g. certificates for code signing) into an image during build, as people can revert to that layer and get it out of there; mount a host directory instead and read it from there, this way it never ends up in a layer.

[sgrhr]

Absolute Saviour you are, anything i search n there u have created a video, Thanks you for the time and efforts

[AfmpJR]

You did it great. Thank you for sharing

[symbally]

Very good recommendations explained concisely; I shared this with my team halfway through watching, love it

[crosticox]

Another great and simple digestible topic. You rock

[Hackenbaker]

Thanks a lot. This information is very valuable.

[amolsurvase]

Thank you Nana ..!! Best video for docker best practice explanation .

[CHITUS]

I had no Idea about changes in previous layers breaking the caching of the following layers! Excellent video

[alifiroozizamani]

What a awesome tips!
Thanks a lot nana🙏

[rtb]

Love your videos Nana ... keep them going