2020-08-04

News⚡

• github/emissary
• Go vs Rust: Writing a CLI tool
• 12 Container image scanning best practices to adopt in production
• GitOps Continued: Using Tekton for CI and Argo for CD
• Sandboxing and Workload Isolation
• AWS Exposable Resources
• 10 most common mistakes using kubernetes
• The Future of Prometheus and its Ecosystem
• design decisions for #gitops-based CD pipelines
• AWS Container Security Survey 2020

Prodding containers

This time around we're using dive and cinf to inspect container images and running containers, respectively.

Commands used:

dive quay.io/mhausenblas/jump:0.2

docker run --name target -d quay.io/mhausenblas/jump:0.2 sleep 10000

docker exec -it -u 0 target sh

cd tmp

curl -s -L https://github.com/mhausenblas/cinf/releases/latest/download/cinf_linux_amd64.tar.gz \
     -o cinf.tar.gz && \
     tar xvzf cinf.tar.gz cinf

md5sum /dev/urandom &

./cinf