DevSecOps Mastery with Docker and Kubernetes

Discover DevSecOps ecosystem through a reference architecture and secure pipelines built on culture, security by design, automation, and repositories protected by RBAC and IAM, with AWS, Azure, and Google Cloud.

Explore building a DevSecOps pipeline with security embedded at every step, including dependency checks, static and dynamic analysis, container image scanning, and secure secret management with vaults and Kubernetes deployments.

Master DevSecOps across AWS, Azure, and Google Cloud by applying the cloud adoption framework to secure CI/CD pipelines with platform-specific security practices.

Plan and deploy DevSecOps with embedded security policies, risk assessments, and industry frameworks, using vulnerability testing, code scanning, and automated remediation to minimize enterprise risk.

Master Docker containers and Kubernetes as core container platforms, with Podman as an alternative. Learn how containers package applications into portable images that enable automated CI/CD and consistent deployment.

Install Docker on Mac with Apple silicon, then run containers via terminal and the Docker desktop GUI, pull images like nginx, and manage containers with start and stop.

Learn Podman as a rootless, daemonless container engine, managing containers and pods with a Docker-like CLI. Explore similarities to Docker, use Podman Compose, and preview container orchestration concepts with Kubernetes.

Explore how Kubernetes orchestrates containers with a master-slave architecture, deploying pods across nodes, enabling service discovery, load balancing, storage orchestration, automatic restarts, and managing resources, configuration, and secrets.

Master Docker image and container management by using read-only templates, creating custom images, and using pull, save, and backup workflows. Understand image layers, tags, and history.

Explore how to write and manage a Dockerfile, build images with docker build, and use layers, caching, and commands like from, copy, run, expose, and cmd to configure containers.

Manage docker containers end-to-end by using docker search and docker run to acquire images, run containers, and inspect packages with docker exec and docker inspect.

Optimize Docker images by reducing layers and using the Docker cache, then consider Alpine-based and Distroless options to minimize size and boost security.

Explore docker security principles, including namespaces and cgroups for isolation, running containers as non-root, and applying best practices like private registry, content trust, SSL, and cap drop.

Utilize docker capabilities to limit root privileges by granting only specific kernel permissions with cap add and cap drop. Validate capabilities using lip cap commands and inspecting /proc/self/status inside containers.

Enable Docker content trust to sign and verify images from registries using a public key and notary server, ensuring image integrity and protection against tampered or compromised content.

Learn how the Docker registry serves as a software distribution mechanism to package, store, and distribute images, including private registries, tagging, and pushing or pulling images.

Audit and harden the Docker daemon security with AppArmor and seccomp profiles, and use Linux audit daemon and auditctl rules to prevent privilege escalation on the Docker host.

Learn how AppArmor and Seccomp profiles protect Docker containers by restricting system calls, applying the Docker default profile, and verifying profile status with AppArmor status.

Master docker bench security, a bash tool that tests host, daemon, image, and runtime configurations against best practices, producing actionable security reports.

Explore Docker Hub security scanning and static analysis tools like Claire and Dagda to identify vulnerabilities across image layers before production, enabling automated checks in CI/CD.

Scan docker images with Clair and Quay to extract layers via a json api, integrating with continuous integration and delivery to surface vulnerabilities, CVEs, and severity scores using qa.io.

Analyze docker container threats and vulnerabilities, including kernel exploits, trojanized images, dirty cow, buffer overflow, SQL injection, and run C risks, using CVE details and up to date images.

Analyze vulnerabilities in docker images by enforcing minimal privileges, memory and CPU limits, and read-only file systems, while keeping images updated and reviewing risks like Shellshock, Heartbleed, and Poodle.

Learn to analyze and certify docker images with anchore, using the enter engine, policy engine, and postgres database to assess vulnerabilities, generate reports, and extract image artifacts.

Learn to manage docker secrets and swarm services for secure container communication. Implement encrypted secret transmission, auditability, and environment-specific credentials across development, test, and production.

Master docker container networking built on Linux namespaces, including bridge, none, and host modes, and manage networks with docker network commands to connect containers, inspect networks, and prune unused ones.

Map ports in Docker by using publish and expose, connect containers via bridge networks to the host, and learn -p and -P port mappings with an nginx example.

Explore creating and connecting Docker networks, inspecting network details, and linking containers to communicate by name or hostname, with attention to environment variables and secret risks.

Master docker monitoring by tracking container metrics and events, including CPU and memory usage, logs, and real-time stats with docker logs, docker stats, and docker events.

Explore docker image layers and assess space efficiency using the dive tool, analyzing changes, file sizes, and wasted space to optimize images for DevSecOps.

Portainer simplifies docker container management with a user-friendly GUI, enabling security, development, testing, and production governance while managing containers, images, networks, volumes, and logs.

Explore how Rancher centralizes container administration by creating multiple environments, managing users and roles, and selecting orchestrators such as Kaito Mesos, Docker Swarm, or Kubernetes, through a user interface.