Rootless Docker: Tips, Gotchas & Fixes
Rootless Docker tuning deep-dive: network drivers, env vars, port drivers, cgroup delegation, and real troubleshooting, anchored to Docker Engine 29.x.
Tag: docker
All the articles with the tag "docker".
Dead Container Took Down Prod
A real postmortem: how a forgotten survey-tool container, an uncapped Docker log driver, and rootless networking combined to kill prod for a Monday morning.
Self-Host a Local AI Coding Workhorse
Self-host Gemma 4 or Qwen3-Coder via Ollama or llama.cpp in Docker, then let Claude delegate the grunt work to it. Free tokens, zero code leakage.
Home Assistant Add-Ons vs Docker Containers
HAOS Add-Ons vs bare Docker Compose for Mosquitto, ESPHome, Frigate, when the Supervisor magic is genuinely worth it and when it just gets in your way.
Rancher vs Podman vs Docker Desktop
Rancher Desktop, Podman Desktop, and Docker Desktop go head-to-head on cost, k8s, resource use, and real-world friction for local dev.
Garden vs Tilt vs Skaffold
Three inner-loop dev tools for Kubernetes, Garden, Tilt, and Skaffold. Which one actually makes K8s development bearable? Honest comparison, no fluff.
Lima vs Multipass
VM-backed Linux dev environments on macOS/Linux, Lima vs Multipass compared on speed, container support, and resource use.
Compose Watch: Faster Dev Loops
Docker Compose Watch syncs your code into running containers without rebuilds. Here's how to set it up and why your dev loop is about to get a lot less painful.
tini vs dumb-init vs --init
PID 1 zombie reaping in containers, tini, dumb-init, and docker --init compared; when each one fixes your signal handling and stops your 10s shutdown tax.
Container Escape: How to Stop It
Containers are not VMs. Here are the real escape vectors, privileged mode, mounted sockets, kernel CVEs, and the runtime hardening that actually helps.
ko vs Jib vs Buildpacks
Build container images without writing a single Dockerfile, ko for Go, Jib for Java, Paketo Buildpacks for everything else. Real benchmarks, real tradeoffs.
Cosign Keyless: Sign Without Keys
Cosign keyless signing uses GitHub OIDC + Fulcio + Rekor to sign container images without managing private keys. Here's how it actually works and why you want it.