You might have missed some interesting image format-related advancements in the Docker registry and engine if you weren’t already paying attention to work that has been in-flight since mid-2015. Specifically, earlier this year a new image format specification was included in...
A few weeks ago I published a blog post discussing methods for sharing the Docker UNIX socket with unprivileged containers; for example when the Docker daemon has user namespaces enabled. Brian Krebs made some...
4/20/2016 Note: Please read my follow-up blog post on this topic based on the comments regarding open access to all Docker APIs via the methods discussed below. A recent question I received asked for ideas on...
When I read this excellent post from Jason Zimdars on working from home (nodding along in recognition much of the way through), I realized I have now been working from home for almost half of my...
I’ve had some amount of ownership and code in the Docker engine since the 1.3.0 release way back in October 2014. But there is definitely something very special about the latest 1.10 release given...
If you’re as big a fan as I am of the comedy “What About Bob,” surely you remember the moment where “Dr. Leo Marvin” scans his shelf for “…a groundbreaking new book that has just come out”–of course...
A quick succession of late year conferences is starting this week as I head to Tokyo for the bi-annual OpenStack Summit. While I am not involved in the OpenStack community directly, my Open Technologies...
So, given a potentially international audience, the title of this blog entry is a spin of an old US presidential campaign phrase, “It’s the economy, stupid!” But what do I mean by that? Well,...
02/08/2016 UPDATE: Check out my latest blog post on security and user namespaces now that Docker 1.10 is officially released. 01/13/2016 UPDATE: User namespaces have migrated out of experimental for inclusion in the Docker 1.10 release slated for...
If you already use Docker, you probably know that, by default, the Docker engine’s REST API is accessible via a UNIX socket which is created when the daemon starts. This allows the local Docker client (or...
Recent Comments