Lebih aman, jangan gunakan root

Tidak memberikan akses ke pengguna root di dalam image membuat image lebih tahan kesalahan, karena pengguna hanya memiliki akses ke hal-hal yang relevan dengan kasus penggunaan yang Anda maksudkan untuk image tersebut. Selain itu, ini adalah salah satu cara terbaik untuk meningkatkan keamanannya. Kami telah membuatkan sebuah image untuk Anda dari Dockerfile berikut, yang mencoba memasang python3 segera setelah Anda menjalankannya.

FROM ubuntu
RUN useradd -m repl
USER repl
CMD apt-get install python3

Mari kita lihat apa yang terjadi jika kita mencoba memasang python3 saat startup sebagai pengguna repl.

Latihan ini adalah bagian dari kursus

Pengantar Docker

Lihat Kursus

Petunjuk latihan

Gunakan docker untuk menjalankan image repl_try_install.

Latihan interaktif praktis

Ubah teori menjadi tindakan dengan salah satu latihan interaktif kami.

Mulai berolahraga

Latihan ini adalah bagian dari kursus

Pengantar Docker

SkillTag.level.intermediateSkillTag.label

4.8+

2250 reviews

Mulai Kursus Gratis

You'll go from starting and stopping your first container to seeing how to clean your environment by removing all containers and images. You'll see how to debug issues by running commands inside a container or executing bash commands in a container interactively. All of this is done using the Docker Command Line Interface.

Exercise 1: Running Docker containers Exercise 2: Running your first container Exercise 3: Running a container in the background Exercise 4: An interactive container Exercise 5: Working with Docker containers Exercise 6: Helping a colleague Exercise 7: Cleaning up containers Exercise 8: Managing local docker images Exercise 9: Pulling your first image Exercise 10: Pulling a specific tag Exercise 11: Cleaning up images

Once you are able to manage images and containers, it's time to know how to share images with colleagues or your entire company and to understand how to create your own. Now, you'll build your own images using Dockerfiles. Dockerfiles are text files that include everything needed for Docker to build an image. You'll learn how to create images and will get an introduction to all the essential Dockerfile instructions like FROM, RUN, COPY, and more. By the end of this chapter, you'll have insight into how Docker makes images and be able to create optimized Docker images from scratch.

Exercise 1: Distributing Docker Images Exercise 2: Sharing your work using a Docker registry Exercise 3: Saving an image to a file Exercise 4: Receiving Docker Images Exercise 5: Creating your own Docker images Exercise 6: Building your first image Exercise 7: Working in the command-line Exercise 8: Editing a Dockerfile Exercise 9: Creating your own Dockerfile Exercise 10: Managing files in your image Exercise 11: Copying files into an image Exercise 12: Copying folders Exercise 13: Working with downloaded files Exercise 14: Choosing a start command for your Docker image Exercise 15: Overriding the default command Exercise 16: Pulling a specific tag Exercise 17: Adding a CMD

In this final chapter, you’ll focus on making your Dockerfiles configurable and secure. You'll learn how to make your Dockerfiles configurable using the ARG and ENV instructions. You’ll see why changing the user in your images makes them more secure and how to use the USER Dockerfile instruction to do so. To wrap things up, you’ll learn about some essential security best practices when creating Docker Images.

Exercise 1: Pengantar caching Docker Exercise 2: Docker caching Exercise 3: Mengurutkan instruksi Dockerfile Exercise 4: Mengubah pengguna dan direktori kerja Exercise 5: WORKDIR dan USER Exercise 6: Mengatur user Exercise 7: Menetapkan direktori kerja Exercise 8: Variabel dalam Dockerfile Exercise 9: Memahami ARG dan ENV Exercise 10: Menimpa ARG saat build Exercise 11: Mengubah perilaku saat memulai container Exercise 12: Membuat Docker Image yang Aman Exercise 13: Praktik terbaik keamanan Exercise 14: Menjaga paket tetap terbaru Exercise 15: Lebih aman, jangan gunakan root

Latihan Saat Ini