docker - Binary Sludge

docker

A collection of 12 posts

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - IPExpo Europe, October 2017

Thanks to @IPExpo for having me - plenty more to discover on their website. Talk also available via PDF.

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - DevOps Tooling Expo, July 2017

Thanks to Amazic and the various interesting vendors for their support - the day comprised a raft of engaging talks pitching at Public Sector organisations. Talk also available via PDF.

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - All Hands On DevOps, June 2017

Thanks to the Third Republic team for hosting All Hand On DevOps this month. Despite the Amazon Prime beer woes it was a great success! Talk also available via PDF.

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - [ Contain ], June 2017

Thanks to Jetstack for arranging the [ Contain ] summer meetup. After two excellent talks I whizzed through this one a tad quickly - thanks to all present for their continued attention despite the pace! Talk also available via PDF.

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - Docker Melbourne, May 2017

Thanks to Ben Griffin for arranging a last minute Docker Melbourne! Talk also available via PDF.

Securing Docker Containers Workshop - Container Camp AU May 2017

Thanks to the attendees of this workshop for not ripping it apart too hard despite a couple of last-minute fixes morphing into bugs! The whole workshop is available on Katacoda, and the slides are also available via PDF:

Talk: Insecure Containers? Continuous Defence against Open Source Exploits - Orchestrate 2017

Sunny Barcelona was a marvellous location for Orchestrate 2017: this talk concerns Docker security in the light of recent widely-available exploits, with a focus on web applications and containers. It's also available via PDF;

Video: Insecure Containers - Continuous Defence against Open Source Exploits - KubeCon 2017

It was wonderful fun to speak at KubeCon 2017 in the company of so many luminaries of the container scene. This talk concerns Docker security in the light of recent widely-available exploits, with a focus on web applications and containers, and then goes into some detail about tools to

KubeCon EU 2016

Videos for the magnificent KubeCon EU 2016 are live, and here are my favourites: * Opening Keynote: Kubernetes Update - Kelsey Hightower gives some project background * A Practical Guide to Container Scheduling - at Google scale; knowledge that informed Kubernetes design * Kubernetes meets Finagle for Resilient Microservices - Twitter's continuous deployment tech

Monitoring a Host from Inside a Container

The Docker philosophy of isolation can be circumvented by mounting host directories into the container (as Datadog client does, for example) or running a container in --privileged container mode (or --share-system for systemd-nspawn). This prevents pid/network/ipc/disk/uts namespacing (or just pid/uts/ipc for nspawn)

Docker error: INFO[0001] unexpected end of JSON input

Using docker version 1.4.1, build 5bc2ff8-dirty on CoreOS 557.2.0 in EC2 # docker build . Sending build context to Docker daemon 181 MB Sending build context to Docker daemon Step 0 : FROM fedora INFO[0001] unexpected end of JSON input This error betrays filesystem corruption, and probably

Talk: Building and Testing Docker Containers

I had the pleasure of speaking at Docker London last night. The meetup was as busy as I've seen Shoreditch Works and the other talks were great. The slides are also available here.