Building labs.iximiuz.com - a place to help you learn Containers and Kubernetes the fun way π
Ivan on Containers, Kubernetes, and Backend Development
Hi friends!
It's Ivan again, with my traditional roundup of all things around iximiuz.com.
Remember that article on Kubernetes I mentioned last time? While I was finishing the last month's issue, the article made it to the front page of Hacker News, thanks to its controversial title: How Kubernetes Reinvented Virtual Machines. When I was done with the newsletter work, I got pleasantly surprised by the number of new readers on the blog. At moments like that, you know for sure that all these hours of suffering writing are worth it!
And now to the updates & announcements!
SPONSORED How Passwordless Works is yet another masterpiece from Teleport. Not a typical shallow corporate blog publication but a deep technical write-up explaining how the new Web Authentication protocol works. If everything goes well, we'll soon be having one more key on our physical keychains, and the days of passwords and password managers will be gone.
β
Announcements
I've been dodging invitations to speak since forever (well, I'm a writing guy), but this month I finally decided to give it a try:
- On August 31st, Martin Wimpress and I will join David Flanagan on his YouTube channel to talk about DockerSlim. One of the things I admire about the RawKode Academy is that all events there end up being truly hands-on, and this one should not be an exception!
- On September 15th, I'll be conducting a virtual workshop devoted to one of my favorite Cloud-Native tools - containerd. Thanks to Saim Safdar for being so kind and inviting me to join the Cloud Native Islamabad community.
I'm looking forward to these streams (but, hell, am I nervous!), and I hope you'll tune in too!
β
What I Was Working On
I've been doing a lot of research this month on how to produce small(er), fast(er), and secure(r) container images. Most of the results are yet to become articles, but I already have something to share: In Pursuit of Better Container Images: Alpine, Distroless, Apko, Chisel, DockerSlim, oh my!β
On the birdy-side of things, there was a bunch of tweets that attracted people's attention:
- π₯ Debunking Container Myths - summary of my series of articles with the same name. Rather a fun read.
- βLinux vs GNU/Linux vs Alpine Linux - a thread about the terminology nuances and the Linux distro peculiarities.
- βContainer Base Image: Debian vs Ubuntu? - if you've ever wondered which one to choose, or how having a company behind a Linux distro results in much faster patching of CVEs, thanks to the public security SLA.
- βWhy Container Images Should Be Slim - a screencast of my favorite developer portal helping me deal with container images (disclaimer: since May, I work there, but it became my beloved tool well before I joined the company).
- βsocat is one love - a quick Linux networking lesson showing how to spin up a simple TCP reverse proxy with just a single (and pretty simple) command.
β
What I Was Reading
- βDocker and the OCI container ecosystem - good overview & summary of the container ecosystem, starting from the explanation of how Docker became the de facto standard container implementation and then touching upon the most popular tools in the area like Docker, containerd, runc, Podman, cri-o, etc. A great addition to my Journey From Containerization To Orchestration And Beyond.
- βWho Should Write the Terraform? - experience-based reflection on the evolution of Admins and Coders into Developers and SREs with a touch upon platform engineering. Good read! Reminded me of my DevOps, SRE, and Platform Engineering.
- βDevelopers Should Deploy Their Own Code - agree with the main theme and most of the points.
- βDesigning Developer Velocity - a great checklist for anyone concerned with DevEx!
- βPersonal Security Posture: How I Keep My Cybersecurity Game Strong - pragmatic piece of advice by Corey Quinn suitable for most of the software folks out there: understand your threats and choose the defense means accordingly.
- Corey asked, "Whatβs the current state of the art for rapid iteration against a development environment k8s cluster" and after getting a myriad of replies, all mentioning a different piece of tech, brilliantly answered the question himself, "the state of the art has yet to emerge".
- βacorn.io - [an attempt to answer the above question by the creators of Rancher] - a containerized application packaging framework that simplifies deployment on Kubernetes. Check out this dope intro by Saiyam Pathak.
- βConcurrency Compared: AWS Lambda, AWS App Runner, and AWS Fargate - worthwhile overview; App Runner sounds like my new (would-be) fave way to run containerized web services. And I'm still of the opinion that AWS Lambda is good only for ad-hoc/event/pure FaaS use cases and inflicts pain in others.
- βgithub.com/sieve-project/sieve - an interesting way to auto-test Kubernetes controllers. At first, it may sound too fancy/complicated, but after reading the testing strategies, it starts sounding much more reasonable.
- βLiving with Kubernetes: 12 Commands to Debug Your Workloads - an old but gold article offering a handy set of commands to debug and troubleshoot Kubernetes workloads.
- βThe API Object Lifecycle - simple but important considerations for handling DELETING objects; must-read for all controller developers.
- βThe Value is in the API - on how the API matters more than the implementation behind it and on the importance of good APIs (including the one provided by Kubernetes).
- βSlim and Secure Containers: DevOps and Docker Live Show - the Slim.AI portal is featured on Bret Fisher's show. See how to inspect your container images and scan them for vulnerabilities right in your browser.
- βVulnerability scanners 101 by Dan Lorenc, Chainguard's founder & CEO. TL;DR - Scanners ain't magic (yet?)
β
Stay Tuned
Well, that was a big one... But I want to believe I shared only the worthy bits! I should probably start sending this newsletter twice a month to make it more digestible, though π
Stay safe and healthy!
Cheers,
Ivan Velichko
Ivan Velichko
Building labs.iximiuz.com - a place to help you learn Containers and Kubernetes the fun way π
Hello π It's this time of the month again! My traditional roundup of all things Linux, Containers, Kubernetes, and Server Side, delivered straight into your inbox π¬ What I was working on October was very productive for me - I shipped no major iximiuz Labs features (it's always hard to resist the temptation!) and instead dedicated all my available time to content work. The main focus was on Container Images. It's the subject of the first module of my "panoramic" Docker course, and it is almost...
Hey there, Iβve just finished putting together everything I know about Node.js container images and figured you might find the write-up useful. If youβre working with Node.js in Docker, chances are youβve been hit by the dilemma of which base image to use. Do you go for the default node:latest, the slimmer node:22-slim, or something super minimal like a distroless image? What about Bitnamiβs alternative β how does it stack up? Before you jump headfirst into your next build, you might want to...
Hello π Ivan's here with a slightly delayed September roundup of all things Linux, Containers, Kubernetes, and Server Side π§ What I was working on This month, I worked on an assorted set of topics. Skill Paths First off, the skill paths! I finally finished the underlying machinery, and now iximiuz Labs supports a new type of content - short roadmaps that you can use to develop or improve a specific skill: how to debug distroless containers, how to copy images from one repository to another,...