Container Image Digests: Pin the Artifact Without Freezing Maintenance
Pin reviewed container image digests, distinguish indexes from platform images, verify deployed content, and maintain an owned update process.
Hackbitez journal
Tag: Containers
Docker HEALTHCHECK: Separate Service Observation from Restart Behavior
Design useful Docker health probes, verify status and timing, and distinguish an unhealthy signal from container-exit restart policies.
Docker Compose Secrets: File Delivery Is Not the Whole Secret Lifecycle
Use Compose secrets deliberately: grant service access, verify application file support, protect host sources, and plan rotation and recovery.
Rootless Docker: Verify Privilege, Storage, Networking, and Limits
Evaluate rootless Docker with host prerequisites, daemon verification, storage checks, networking tests, and resource-limit validation.
Kubernetes 1.37 Workload-Aware Scheduling: Test Groups, Gates, and Recovery
Understand Kubernetes workload-aware scheduling milestones and test feature gates, grouped placement, preemption, and resource cleanup.