aleroxac / dockerfiles

Badass base container images to be used in any project.

dockerfiles

Badass base container images to be used in any project.

Main technologies

Resources

• Best practices, tips and tricks earned from professional experiences working with as SRE/DevOps/Platform Engineer
• Docker Official Documentation
• Label Schema Convention
• Semantic Versioning Convention
• Keep Changelog Convention
• Open Source Guides
• Code Manifesto
• Docker Content Trust
• Scan images using aquasec/trivy
• Scan dockerfiles using hadolint
• Scan project using kics
• Conventional Commits
• OpenSSF Best Practices Badge Program
• Rootless Containers
• Git Flow
• Container Structure Tests
• Markdown Badges

Features

• Multiple scans to ensure maximum of conformity and security
• Automations for doing some boring stuff
• A demo for each image
• Trusted pipeline
• Images with Content Trusted sign
• Unit, integration and e2e tests to ensure peace of mind
• Cosign Vulnerability Scan Record Attestation Specification
• Detailed documentation of how to handle the project

Languages Supported

• python
• golang
• javascript(nodejs)
• java
• php
• csharp
• lua
• shellscript

Architectures Supported

• amd64
• arm64

Image Types Supported

• alpine
• slim
• distroless
• scratch
• debian

Usage

• Choose one language and see the demos here

Images and tags

image	language	base	arch
aleroxac/python	python	alpine	linux/amd64

Thanks

• vscode

• docker

• make

• python

• dive

• yamllint

• hadolint

• trivy

• kics

• git

• github

• github-actions

• editorconfig

• mkdocs

References

• https://github.com/opencontainers

• http://label-schema.org/rc1/

• https://docs.docker.com/docker-hub/official_images/

• https://github.com/docker-library/official-images

• https://docs.docker.com/develop/dev-best-practices/

• https://docs.docker.com/develop/develop-images/dockerfile_best-practices

• https://docs.docker.com/config/labels-custom-metadata/

• https://docs.docker.com/engine/reference/builder/

• https://docs.docker.com/build/ci/github-actions/examples/#github-cache

• https://docs.docker.com/language/java/run-tests/

• https://github.com/dimorinny/dockerfile-testing

• https://www.gasparevitta.com/posts/docker-unit-test-dockerfile-image/

• https://medium.com/@renatomefi/unit-testing-writing-dockerfiles-like-a-software-developer-1759f416ce84

• https://semaphoreci.com/blog/structure-testing-for-docker-containers

• https://github.com/riyazdf/dockercon-workshop/tree/master/capabilities

• https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-breakout/docker-breakout-privilege-escalation

• https://flast101.github.io/docker-privesc/

• https://www.testcontainers.org/

• https://docs.sigstore.dev/

• https://www.youtube.com/watch?v=eRPkNd40n94&ab_channel=FlorianLudewig

• https://github.com/opencontainers/image-spec/blob/main/spec.md

• https://github.com/theonemule/docker-waf

• https://github.com/Tintri/hello-bench

Actions

• https://github.com/brpaz/structure-tests-action
• https://github.com/reviewdog/action-shellcheck
• https://github.com/cycjimmy/semantic-release-action
• https://github.com/actions/checkout
• https://github.com/snyk/actions/docker
• https://github.com/github/codeql-action/upload-sarif
• https://github.com/
• https://github.com/
• https://github.com/
• https://github.com/
• https://github.com/