The document provides a collection of tips for using Docker more efficiently. It begins with introducing the author and their experience with Docker. Then, it details several tips including: using secrets to securely store sensitive data; using Snyk to scan images for vulnerabilities; leveraging Buildkit for faster image builds; implementing multi-stage builds; and using Ouroboros or Watchtower for simple container updates. Links are provided for further information on some of the advanced Docker features discussed.

1. Docker: Ninja Tips
Matheus Melo

2. # docker inspect me
- CTO/CEO - Thinkr
- Entrepreneur
- Tech Enthusiast
- 13 years working with IT
- 6 years dockering out there
- Coffee is life
- Driven by Challenges

3. # docker inspect requirements

4. # docker inspect this
- Collection of tips world wide known but not much used by all
- Shenanigans learned through time
- Basic but pro stuff
- Advanced features

5. # here we go
docker-compose up

6. #1 What’s the problem here?

7. #2 Non-root container users

8. #3 Interacting with non-root containers
docker exec -it container_name bash
docker exec -u 0 -it container_name bash

9. #4 Secrets
- Only works in Swarm Mode
- You need to change your standalone containers to services
- What is good to be stored in secrets:
- Username and Passwords
- SSH Keys
- Certificates
- Other important data <= 500kb
- Why is good?

10. #5 Image Vulnerability Scanner

11. #5.1 Snyk - Image Scanner - https://snyk.io/

12. #6 Buildkit
- What is?
- Why use?
- How to?
- export DOCKER_BUILDKIT=1
- docker-compose > 1.25.1
- docker engine > 1.18
- Build Image Time:
- Native Backend: 3m19s
- Native Backend cached: 1m21s
Thanks to moby/buildkit project

13. #6.1 Buildkit in action
Build Image Time with BK:
- BK: 1m26s
- BK cached: 0-1s
Even composer is cached :O

14. #7 Multi-stage build
- What is?
- Why use?
- How to?

15. #7.1 Multi-stage PHP Laravel Build
- We need a container to run PHP
- We will need dependencies to be downloaded by composer
- We will need some other dependencies to be download by NPM
- Can you imagine this dockerfile?

16. #7.2 How this will look like?
1
.
2
.
3
.

17. #8 The Dockerfile build trick
- Imagine building a Dockerfile with more than 100 lines
- What if you change something inside the dockerfile?
- What if you change something OUTSIDE the dockerfile?
- Just use Buildkit pls

18. #9 Network Security

19. #10 Docker and Windows
1. Docker Toolbox - DEPRECATED
2. Docker for Windows (Hyper-V)
3. Docker Desktop for Windows - WSL1 and WSL2

20. #11 Logs FTW
Always look at your logs
> docker-compose logs -f
> docker logs -f container_name
> docker service logs -f service_name
Use tail, when necessary :) (--tail=200)

21. #12 Simple update running containers
● If you don’t have an automatic deploy pipeline already built
○ If you don’t need an advanced deploy pipeline
■ if your application is already adapted to docker and independent
● Try Ouroboros
● Alternative to Watchtower

22. #12.1 Ouroboros BEWARE

23. # That’s all folks
docker-compose down

24. .Dockerfile
FROM molatechtalk
LABEL author=Matheus Melo
LABEL personal_mail=matheuscmpm@gmail.com
LABEL pro_mail=matheus.melo@thinkr.com.br
LABEL social_alias=matheuscmpm
LABEL whatsapp=+5581981858411
RUN agradecimentos.sh
CMD [“/duvidas.sh”]

25. docker inspect content
https://docs.docker.com/
https://github.com/moby/buildkit
https://laravel-news.com/multi-stage-docker-builds-for-laravel
https://docs.docker.com/develop/develop-images/multistage-build/
https://www.docker.com/blog/faster-builds-in-compose-thanks-to-buildkit-support/
https://docs.docker.com/develop/scan-images/
https://docs.docker.com/develop/develop-images/build_enhancements/
https://medium.com/@jinnerbichler/10-advanced-tricks-with-docker-2ff191475aae
https://stackify.com/docker-performance-improvement-tips-and-tricks/