Docker Tools

---

Table of Contents

• Docker Images
  • IaC
  • Kubernets
  • Load Testing
  • CI Automation
  • Cloud Security
  • Policies
  • Cyber Security
  • Git Security
  • Languages
  • Debug Infrastructure
• Tips and Tricks
  • Create Locally
  • Image Hardening
  • Trial
  • How to Contribute
• Commands
• Resources
• Example commands
• TODO

---

• Container labels: Open Containers
• Container labels: Label Schema

---

Docker Images

IaC

Name	Badges	Version
Terraform
Terragrunt

Kubernets

Name	Badges	Version
Helm
Kubernetes Tools
Kubernetes Test Tools
Kubectl

Load Testing

Name	Badges	Version
Gatling
Artilery

CI Automation

Name	Badges	Version
CI Tools
Microsoft App Center
Jo

Cloud Security

Name	Badges	Version
Cloudmapper
CloudCustodian Mailer

Policies

Name	Badges	Version
OPA

Cyber Security

Name	Badges	Version

Git Security

Name	Badges	Version
Trafflehog
GitHound

Languages

Name	Badges	Version
NodeJS 12
NodeJS 14

Debug Infrastructure

Name	Badges	Version
Network Utils

Tips and Tricks

Create Locally

FROM ${DOCKER_REGISTRY:-none}/{ARCH:-amd64}/{OS:-ubuntu}/${RELEASE:-bionic}:${TIMESTAMP:-latest}

Image Hardening

FROM <your repo>/<your project>/<your image>:<your tag>
ARG user=testuser
ARG group=testuser
ARG uid=2000
ARG gid=2000
ENV TEST_HOME /home/testuser
RUN groupadd -g ${gid} ${group} \
&& useradd -d "$TEST_HOME" -u ${uid} -g ${gid} -m -s /bin/bash ${user}
RUN chown -R ${user} "$TEST_HOME"
RUN chown -R ${user} "/usr/src"
USER ${user}

Trial

• Hadolint

How to Contribute

Submit a pull request

Commands

docker build .  --tag image \
  --build-arg VERSION=$(cat version)

Resources

• Hardened images

Example commands

docker build --no-cache -t test .
docker system prune
docker tag local-image:tagname new-repo:tagname
docker push new-repo:tagname
docker push cloudkats/appcenter-cli:tagname
docker run --rm test "kubectl version --short --client=true" | awk '{print $3}' | sed -e 's/^v//'

TODO

Work in Progress

1. add user to every container (# RUN adduser --system --home /ci --disabled-password --group ci)
2. Fix broken links
3. Unify container labels
4. Link to source code on main page
5. Link back to project from Docker Hub
6. Renovate configuration
7. Use requirementes.txt file with python packages
8. Review missing images