Bret and Nirmal are joined by Dan Lorenc from Chainguard to walk them through Chainguard's approach to building secure, minimal container images for popular open source software.

They discuss why it is important to have secure and minimal container images. Dan explains how Chainguard helps remove the pain of CVEs, laggy software updates and patches and much more. Chainguard is now available also on Docker Hub.

They spend the first part of the show talking about the week's big news: the XZ supply chain attack, and Dan was the best man to explain it. They also touch on CVEs, things you can do to reduce the attack surface, SLSA, and more during this jam-packed show.

Be sure to check out the live recording of the complete show from April 4, 2024 on YouTube (Ep. 261).

★Topics★Chainguard Website Vulnerability Management Certification course True Cost of Vulnerability Management Chainguard Images Chainguard on Docker Hub Announcement

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Dan Lorenc - Guest

• (00:00) - Intro
• (05:14) - Dan's Take on the XZ Hack
• (14:59) - Chainguard Distro Creation
• (21:21) - Chainguard in Docker Hub Announcement
• (24:26) - Free Images vs Private Images
• (26:27) - Zero CVE Approach
• (28:33) - Ways to Reduce Attack Surfaces
• (39:56) - Chainguard Academy
• (41:08) - Real Time Antivirus Malware Scanner
• (43:52) - Google Distro Lists Worth Using
• (45:56) - Chainguard for Buildpacks
• (46:20) - SLSA
• (56:08) - What's Next for Chainguard?
• (56:52) - Getting Started with Chainguard

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and Nirmal are joined by Phil Estes of AWS to show us the Finch project, which bundles the best open source tools for building and running containers locally. Now it runs on macOS and Windows WSL2.

We've been talking with Phil about this show for months, and now that Finch has come to Windows, we thought it was the best time to clue you in as to why AWS created the Finch project and what it does.

You've probably heard of containerd, the most popular container runtime on the planet and BuildKit, the best way, in my opinion, to build container images. Those two work hand in hand in Docker and many other container tools. But you might not have heard of nerdctl or Lima, which are also open source tools that work with containerd and BuildKit to help you run containers locally in a virtual machine. Well, AWS had the idea of making an easy installer for these four tools. That's how Finch was born.

Finch is not meant to be a replacement of your existing way to run containers. The tools it installs are a bit of a minimum feature set, if you will, and more focused on providing people the exact tools AWS uses in its container platforms, mainly containerd and BuildKit, which are everywhere in AWS. Rather than building something that's feature equivalent to other local container solutions like Docker Desktop and Rancher Desktop, Finch keeps it simple and does the bare minimum. 

If you just want an easily installable and minimal way to build and run local containers at the command line with no goofy, high-end fancy features, pure open source and just on Mac and Windows, at least at this point, you should give Finch a try.

Be sure to check out the live recording of the complete show from February 22, 2024 on YouTube (Ep. 255).

★Topics★Finch WebsiteBret's local container runtime spreadsheet

Creators & Guests

• Phil Estes - Guest
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host

• (00:00) - Intro
• (00:35) - What is Finch?
• (03:53) - Phil's History with Docker and Finch
• (07:59) - Deep Dive into AWS Finch Project
• (11:41) - How do the Components Tie Together
• (25:31) - Finch's Position in the Container Ecosystem
• (26:47) - Finch's Capabilities and Comparisons
• (27:45) - VM Management and Lima Integration
• (37:51) - Finch's Roadmap and Community Engagement
• (41:49) - How Does Finch Connect to Lima?
• (42:45) - Potential Lima Conflicts with Finch
• (46:38) - Getting Started wtih Finch

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Neil Cresswell, CEO and co-founder of Portainer, to show us new features in Portainer and how it can manage, deploy, and orchestrate all your container workloads from a single Docker Engine, all the way to multi-cluster and IoT Kubernetes deployments.

Portainer is much more comprehensive than you might think. Docker on the Edge, Podman, Kubernetes, in the cloud, in hybrid, you name it; it seems that Portainer supports it. In the show, we also get some updates on new things that have happened in the last couple of years, including adding GitOps support to Portainer, the ability to deploy Kubernetes nodes, and infrastructure.

Be sure to check out the live recording of the complete show with demos from February 29, 2024 on YouTube (Ep. 256).

★Topics★Portainer Website Portainer on YouTubePortainer on XPortainer on LinkedInPortainer Demo: Kubernetes the "easy" way

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Neil Cresswell - Guest

• (00:00) - Intro
• (02:50) - How Portainer Started
• (05:38) - Portainer's Strongest Use Cases
• (08:56) - Portainer's Cluster Provisioning
• (12:42) - Docker Desktop and Portainer
• (15:22) - GitOps with Portainer
• (18:43) - K2D Teaser
• (21:34) - Portainer Across Different Environment Types
• (25:21) - Portainer's Focus on IoT and Edge
• (29:01) - Portainer's Evolution and Future Developments
• (35:03) - Passwords and Secrets Capabilities in Portainer
• (40:15) - AI Capabilities in Portainer
• (42:06) - Portainer Editions, Licenses and Pricing
• (43:09) - Using Traefik for Ingress
• (44:53) - What's Next for Portainer?

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and Nirmal are joined by Ivan Burazin and Chad Metcalf to debut Daytona, an open source "codespaces equivalent."

Daytona is a development environment manager designed to automate all the tedious steps a developer needs to perform to set up their development environment. "Essentially, it transforms any machine into a codespaces equivalent."

Where Daytona is actually starting in the enterprise is focusing on large dev environment solutions and management of those, and then trickling down to individual developers. So there are two very similar solutions to a problem of many developers and their varying ways that they set up their environments for development, but they're coming at it from two ends of the spectrum.

Be sure to check out the live recording of the complete show with demos from March 7, 2024 on YouTube (Ep. 257).

★Topics★Daytona websiteDaytona on GitHubWhy Daytona OSS'dDIY Guide

Creators & Guests

• Ivan Burazin - Guest
• Chad Metcalf - Guest
• Bret Fisher - Host
• Nirmal Mehta - Host
• Beth Fisher - Producer
• Cristi Cotovan - Editor

• (00:00) - Intro
• (06:33) - CodeAnywhere
• (07:50) - Introducing Daytona: Revolutionizing Dev Environments
• (13:54) - Demo
• (21:07) - Daytona's Automation Magic
• (22:49) - Comparing Daytona with DevPod
• (25:15) - Daytona's Roadmap and Beyond
• (27:01) - Dev Environments and IDEs
• (39:52) - AI with Daytona
• (44:05) - Getting Started with Daytona
• (44:35) - Getting Involved in Daytona
• (47:00) - Features About to Ship in Daytona

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and Nirmal are joined by Lukas Fittl of pganalyze to dive into Postgres in containers, in production, and in CI.

Lukas is an expert and founder of pganalyze, and I invited him on the show to explain a lot of this to us and catch us up with what's going on in the Postgres community, particularly when it comes to containers and production.

We dive into everything around containers with Postgres, some of the new stuff going on in Postgres Land, including tuning and stuff I didn't even know about Postgres, including storing NoSQL data, vector databases for AI and more.

Be sure to check out the live recording of the complete show from February 15, 2024 on YouTube (Ep. #254).

★Topics★pganalyze websitepganalyze YouTube channel pgvector cloudnative-pg Crunch Postgres for Kubernetes CockroachDB

Creators & Guests

• Bret Fisher - Host
• Lukas Fittl - Guest
• Nirmal Mehta - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer

• (00:00) - Intro
• (01:59) - Is Postgres Underrated?
• (04:18) - What is pgAnalyze?
• (05:02) - Database Performance Tuning
• (11:11) - Postgres in Containers
• (19:44) - Opinion on kubegres and other operators in managing HA
• (25:03) - The role of Database Administrators and Data Engineers
• (31:54) - Running Postgres HA across multi-cluster
• (39:23) - What does pgnalyze do?
• (44:45) - The hardest operational problem running Postgres in containers

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and Nirmal are joined by Melissa McKay, Developer Advocate at JFrog and Docker Captain, to discuss the best and worst of 2023.

We recorded this episode in December of 2023 where we talked through our favorite tools. Whether a DevOps oriented tool or not, it just might be the things we like to use on containers and in Cloud Native DevOps. This is a fun episode of three friends talking about what they love. And I sometimes I think these are the best shows because we didn't plan them out. I hope you enjoy listening to it as much as we did recording it. 

The live recording of the complete show from December 14, 2023 is on YouTube (Ep. #245)

★Topics★Dive WebsiteSlimToolkit WebsiteOpenTelemetry WebsiteeBPF WebsiteeBPF Documentary Continuous Delivery Foundation CDEvents Websiteops.org">ML Ops WebsiteOllama WebsiteDocker + OllamaNeo4j Websitegadget.io">Inspektor Gadget WebsiteArc Browser k6 Load testingCreators & Guests

• Beth Fisher - Producer
• Bret Fisher - Host
• Melissa McKay - Guest
• Cristi Cotovan - Editor

• (00:00) - DDT MAIN
• (04:13) - A Little Tool Called Dive
• (09:49) - SlimTooklit from Slim.AI
• (12:11) - OpenTelemetry
• (14:57) - eBPF
• (18:44) - Chainguard Images
• (21:48) - Digestabot
• (25:03) - Looking Forward to 2024
• (27:29) - CDEvents
• (31:32) - MLOps
• (34:58) - Ollama
• (37:30) - WebAssembly
• (38:26) - Inspektor Gadget
• (39:33) - Arc Browser

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Matan Mishan & Roy Razon of Livecycle to discuss developer platforms and how to improve developer collaboration and speeding up feedback and previews.

We talk about the various delays encountered in pull requests due to feedback processes, and how Lifecycle's tools aim to shorten this feedback loop in Docker Desktop, local CLI with Preevy, and automated CI workflows. I like how Lifecycle provides multiple locations and ways to get access to people in the preview environments that really lets you just fit the different parts of the tool into your workflow, as opposed to one way to do everything. It's great for getting feedback quickly during the PR process, rather than making people set up their own environments to test their changes. I also liked their ideas around how the feedback loops can be improved.

This episode contains great demos so be sure to also check out the live recording of the complete show from December 21, 2023 on YouTube (Ep. #246).

★Topics★Livecycle's WebsitePreevy RepositoryLivecycle Docker Extension

Creators & Guests

• Bret Fisher - Host
• Matan Mishan - Guest
• Roy Razon - Guest
• Beth Fisher - Producer
• Cristi Cotovan - Editor

• (00:00) - Intro
• (01:57) - Internal Developer Platform: a self-service solution
• (06:38) - Lifecycle and the Docker Extension
• (24:10) - Using GitHub Environments
• (27:46) - First Steps and What's Next

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and Nirmal are joined by Michael Irwin, DevRel at Docker, to talk about all the products and features Docker shipped in 2023, and what's coming in early 2024.

Michael has been on this show many times as a Docker Captain and now as a Docker employee, and it's always great to dig into the details of the products with someone who's been using them for so many years as an end-user and now staff at Docker.

Docker did some big things in 2023, but they also shipped some smaller features that we will help you catch up on in this episode.

The live recording of the complete show from December 28, 2023 is on YouTube (Ep. #247)

★Topics★Docker 2023 MilestonesDocker Build CloudDocker Engine release notesDocker Compose WatchDockerCon PlaylistDockerCon AnnouncementsCompose includesDocker ScoutDocker GenAI stackGetting started with GenAI on DockerDocker acquires Mutagen

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Michael Irwin 🇺🇦 🕊 - Guest

• (00:00) - Introduction
• (02:11) - The Docker Engine
• (04:43) - Performance improvements
• (08:16) - Docker Extensions
• (09:12) - Dashboard and GUI updates
• (12:46) - Docker init
• (17:43) - What's new in Compose?
• (24:33) - Docker Scout
• (36:43) - Docker and AI/Machine Learning
• (43:55) - What's Coming Up in 2024?
• (47:07) - Docker Debug

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Alex Kretzschmar to talk about Tailscale, a universal VPN that connects teams, devices, and development environments for easy access to remote resources.

Alex and I talk about projects he's worked on in containers over the years and then we quickly get into Tailscale and talking about why he joined the team there.

Tailscale is one of those tools that's hard to put down. I've used it for years to connect my personal devices to my home server lab when I'm traveling or servers I might have on the internet that I run temporarily. It connects them all together in a seamless VPN. The product itself comes up a lot in our Discord server when people are talking about needing some secure remote access to something anywhere in the world.

Tailscale keeps adding more and more features, I can't really keep up, so we had Alex on the show to talk about all the new stuff, including a client for Apple TV, which at first, I didn't quite understand why, but now it totally makes sense; and a Kubernetes operator that does some slick things around connecting engineers on their local machines to clusters. I found Alex at the Tailscale booth at KubeCon this year and invited him on the show to talk about this relatively new yet ubiquitous-feeling product. 

The live recording of the complete show from November 30, 2023 is on YouTube (Ep. #243)

★Topics★Tailscale websiteHeadscale websiteTailscale CommunityTailscale Docker Mod Blog PostID Headers DemoDevrel Demo

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Alex Kretzschmar - Guest

• (00:00) - Tailscale Everything
• (19:37) - Tailscale Licensing
• (28:24) - Tailscale vs Other Networking Products
• (32:33) - Server and Key Exchange
• (33:50) - Does Tailscale Support 'Trunking'?
• (39:20) - Client for Mikrotik
• (40:06) - Docker Integration
• (43:46) - Tailscale Server on Your Own Hardware
• (46:57) - Apple TV Client
• (48:54) - Performance Breakthroughs
• (50:52) - Key Exchange Mechanism

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

I break down why Dockerfile frontends exist and how Docker's build engine "BuildKit" is giving us updated Dockerfile features.

The TL;DR of this podcast is to add this to your Dockerfiles as the first line, always and forever.

It'll ensure your Dockerfile will have access to the latest v1.x features of the "Dockerfile frontend" feature of BuildKit.★Topics★My newsletter on Dockerfile frontends (including links and references)Creators & Guests

• Beth Fisher - Producer
• Bret Fisher - Host

• (00:00) -
• (00:36) - Understanding Docker Files
• (00:47) - The Evolution of Docker Files
• (01:05) - The Importance of Docker File Versions
• (02:20) - The Impact of Dockerfile Standards
• (03:41) - The Benefits of Using the Latest Dockerf ile Parser
• (04:16) - The Challenges of Docker Engine Versions
• (05:18) - The Advantages of Docker Front Ends
• (07:56) - The Role of OCI in Dockerfiles
• (10:18) - Exploring New Features in Docker File Front Ends
• (15:27) - Conclusion: The Future of Docker Files

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com