Labspace - Building secure images

Once you've learned to build images, the next question is "Did you build a good image?" Is it secure? Is it following best practices?

In this Labspace, you'll learn how to ensure your images are secure and following best practices. You'll learn how to leverage Docker Scout to analyze and fix discovered issues.

Learning objectives

By the end of this Labspace, you will have learned the following:

• Use Docker Scout to perform an analysis of a container image
• Select base images for a more secure foundation
• Resolve application-level CVEs
• Configure a default non-root user

Launch the Labspace

To launch the Labspace, run the following command:

docker compose -f oci://dockersamples/labspace-building-secure-images up -d

And then open your browser to http://localhost:3030.

Using the Docker Desktop extension

If you have the Labspace extension installed (docker extension install dockersamples/labspace-extension if not), you can also click this link to launch the Labspace.

Contributing

If you find something wrong or something that needs to be updated, feel free to submit a PR. If you want to make a larger change, feel free to fork the repo into your own repository.

Important note: If you fork it, you will need to update the GHA workflow to point to your own Hub repo.

1. Clone this repo

2. Start the Labspace in content development mode:

   # On Mac/Linux
   CONTENT_PATH=$PWD docker compose up --watch
   
   # On Windows with PowerShell
   $Env:CONTENT_PATH = (Get-Location).Path; docker compose up --watch

3. Open the Labspace at http://localhost:3030.

4. Make the necessary changes and validate they appear as you expect in the Labspace

   Be sure to check out the docs for additional information and guidelines.