Recent posts tagged containers

title: "You patched PHP. The old image is still in your cluster's future." published: false description: "PHP2Shell CVE-2026-109618, CVE-2026-109619 as seen from a Kubernetes cluster: how fast the scanners caught up, where they stay blind, and why r...

What an adventure it has been 🤠 It all started with yet another attempt to configure NixOS as a replacement for Debian, which I use every day. I really like the idea behind NixOS: declarative configuration of the entire system and the ability to re...

Most of us here already reach for Compose the moment a project grows past a single process, and agent work hits that point faster than almost anything else. What follows is the shape that keeps showing up once an agent stops being a script and starts...

Container escapes typically occur when a container gains direct access to host resources due to excessive permissions or shared namespaces. I'm working on a few Github projects to explore these risky misconfigurations in reproducible PoCs. The 3 cate...

Github Source: https://github.com/ndouglas-edera/hostpid-risk/tree/main In a multi-tenant or shared Kubernetes node environment, containers are supposed to be isolated environments. However, this demo proves that if a malicious or compromised pod is...

For years, security teams viewed container breakout attacks as an operational nuisance. The kind of nuisance that was largely confined to misconfigured Kubernetes clusters, over-privileged dev environments, or cloud cryptojacking campaigns. The secur...

Containerization has become a fundamental skill for DevOps Engineers, Cloud Engineers, and Software Developers. However, many beginners learn Docker commands without understanding the complete workflow behind them. Questions like: What exactly is...

If you've ever worked on a collection of different Node apps, you've likely encountered version conflicts. Everyone wants a different version of Node or PNPM, and your new job is trying to align them all, or managing versions daily. That's when open...

Instead of a Dockerfile, we write YAML-based files for apko1. This file tells apko exactly which repositories to trust and which packages to materialise into the image. mkdir apko-demo && cd apko-demo && cat ...

I’m working in software supply chain security, with a specific focus on secure Kubernetes deployments. In a DevOps capacity, I’m focused specifically on ensuring that my container images have as few software vulnerabilities as possible. I believe Wol...

Hey folks! In the previous posthttps://dev.to/rvneto/building-a-microservices-ecosystem-stock-brokerage-simulator-my-broker-b3-45bj, I introduced the overview of My Broker B3. Today we'll talk about the foundation that supports the entire ecosystem:...

1. Introduction Nowadays, applications are moving towards microservices because of their scalability, rollback deployment, and faster development. But with the growing number of services, deployment pipelines have become: Slow like updating all s...

Amazon ECS: From EC2 Managed to Express Mode Amazon ECS has evolved significantly over the years—from managing EC2 container instances manually, to the introduction of Fargate for serverless containers, making infrastructure management seamless. Fo...

Explore how to integrate Docker into your Laravel development workflow for enhanced efficiency and consistency. Setting up a development environment can be challenging. Using Docker with Laravel can simplify this process remarkably. Here’s how to ge...