@@ -81,6 +81,23 @@ configurations and dig deeper into how containers work.
8181 is a bonkers in-depth post about building your own simplified, but not
8282 simple version of Docker to learn how it works.
8383
84+ * [ A Comparison of Linux Container Images] ( http://crunchtools.com/comparison-linux-container-images/ )
85+ presents data on many of the frequently-used base container images.
86+
87+ * [ 7 best practices for building containers] ( https://cloudplatform.googleblog.com/2018/07/7-best-practices-for-building-containers.html )
88+ provides Google's recommendations for creating containers such as
89+ include only a single application per container, make sure to use
90+ descriptive tags and build the smallest image size possible.
91+
92+ * [ Building healthier containers] ( https://blog.kintoandar.com/2018/01/Building-healthier-containers.html )
93+ examines how [ Docker containers] ( /docker.html ) are different from
94+ virtual machines and digs into dependencies that can be included in
95+ your container image if you do not know how to properly build them.
96+
97+ * [ Containers patterns] ( https://l0rd.github.io/containerspatterns/ )
98+ covers common usage patterns that have developed now that containers
99+ have been in development workflows for a few years.
100+
84101
85102### Container security resources
86103Container security is a hot topic because there are so many ways of screwing
@@ -92,5 +109,10 @@ resources explain security considerations specific to containers.
92109 author created [ img] ( https://github.com/genuinetools/img ) as a tool
93110 to help solve the problems she was seeing.
94111
112+ * [ Making security invisible] ( https://docs.google.com/presentation/d/1x0DfyC8OxTHsiqf6YRGmqS63CjqCs8-613T_Dzdyi0Q/mobilepresent?slide=id.p )
113+ is a great presentation that covers sandboxes, Seccomp and other
114+ concepts for isolating potentially unsafe code to limit attack scope.
95115
96-
116+ * [ 10 layers of Linux container security] ( https://opensource.com/article/17/10/10-layers-container-security )
117+ explains many of the attack vectors you need to be aware of when you
118+ are working with containers.
0 commit comments