Docker Build: Creating Secure Node.js images with Liran Tal

#security #docker #containers #nodejs
--

Docker is an open platform for developers to build, share and run distributed applications. With Docker, IT organizations shrink application delivery from months to minutes, frictionlessly move workloads between data centers and the cloud and can achieve up to 20X greater efficiency in their use of computing resources. Inspired by an active community and by transparent, open source innovation, Docker containers have been downloaded more than 700 million times and Docker is used by millions of developers across thousands of the world’s most innovative organizations, including eBay, Baidu, the BBC, Goldman Sachs, Groupon, ING, Yelp, and Spotify. Docker’s rapid adoption has catalyzed an active ecosystem, resulting in more than 180,000 “Dockerized” applications, over 40 Docker-related startups and integration partnerships with AWS, Cloud Foundry, Google, IBM, Microsoft, OpenStack, Rackspace, Red Hat and VMware.

[Ivan-Zmerzlyi]

Nice show, much appreciated. I like to use Node.js and Docker.

[Rimelek]

Interesting video. I didn't know about HA Proxy GUI. Thank you, but please, don't do something and say "I probably shouldn't do it but I do it anyway" :) In my opinion avoiding latest tag is important even for demonstrations and you were right, normally you should not use apt upgrade in the Dockerfile, but I guess it is not a big problam if you need it for some reason and you have a build test before distributing the image. but even then, you should upgrade only what you really need to upgrade not the entire system.

Thanks for the video again!

[donaldbrower]

In the final version of the docker file, is the npm install command being ran by the node user or the root user?