Docker Multi-Stage Builds: The 1.2GB Image I Stopped Shipping
I cut a 1.2GB Go service image down to 12MB with a Docker multistage build. The before and after Dockerfiles, the base images I picked,…
I cut a 1.2GB Go service image down to 12MB with a Docker multistage build. The before and after Dockerfiles, the base images I picked,…
The Docker container security checklist I run on every service: non-root users, dropped capabilities, read-only filesystems, build secrets and digest pinning.
Seven Dockerfile habits I changed after my images got embarrassing: smaller bases, multi-stage builds, cache mounts, non-root users, and pinned digests.
Six Docker habits I dropped from production in 2026, the ones I kept, and the small changes that cut image size, build time, and CVE…
I've shipped a hundred Dockerfiles over two years. Here are the Docker best practices that actually earned their keep, and the 2020-era tips I quietly…