iwantcoding.com
🔥 Daily 👥 Rooms 🏆 Top Log in Sign up
Next »

Docker Summary

By · Reviewed & last updated · Part of Docker Tutorial

Wrapping up the Docker track with what you can ship and where to go next.

What you learned + a signed multi-arch image

EXAMPLE
# Docker summary

You can now:

- Author multi-stage Dockerfiles that produce small, distroless images
- Use BuildKit cache mounts and multi-platform buildx
- Run rootless containers with healthchecks
- Compose multi-service environments for local dev
- Sign images with cosign and verify in the pipeline
- Scan images with docker scout, trivy, or grype
- Push to ECR, GHCR, or a private registry
- Tune logging, signals, and graceful shutdown for orchestrators

# Your next step - a signed multi-arch image

# Build for two architectures
docker buildx create --use
docker buildx build \
  --platform linux/amd64,linux/arm64 \
  -t ghcr.io/me/app:1.2.3 \
  --push .

# Sign with cosign (keyless via OIDC in CI)
COSIGN_EXPERIMENTAL=1 cosign sign ghcr.io/me/app:1.2.3

# Verify in your deploy pipeline
COSIGN_EXPERIMENTAL=1 cosign verify \
  --certificate-identity 'https://github.com/me/app/.github/workflows/release.yml@refs/tags/v1.2.3' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  ghcr.io/me/app:1.2.3

Why it matters

Docker is now the assumed unit of deployment in 2026. The next-level skills are signing, scanning, and OCI literacy - the things that turn build-it into trust-what-we-deploy.

Tip: Tweak the snippet with Try it Yourself », then sit the quiz at the bottom of the page.

Example

Example
# Next: Kubernetes, image security scanning, multi-arch builds.
Try it Yourself »

Discussion

Loading…

Next »