Top all-time · #186
Docker
Company blog · blog.docker.comprogrammingsystems
Docker is the company blog at blog.docker.com, writing about programming and systems. Since 2014, 243 different Hacker News readers have linked it 418 times, most often “Docker for Mac and Windows Beta”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
An AI code review agent invented a CVE and recommended dangerous fixes. Learn how Docker Sandboxes contain agents and why their output needs verification.
Most-linked posts?
- Docker for Mac and Windows Beta7 people · 7 mentions · first linked 2016-03-24
- /2016/05/docker-unikernels-open-source/4 people · 6 mentions · first linked 2016-07-29
- Docker 1.11: The first OCI-compliant runtime, built on containerd4 people · 4 mentions · first linked 2016-04-13
- Moby: An open-source project to advance containerization4 people · 4 mentions · first linked 2017-04-18
- Containers Are Not VMs – Docker Blog4 people · 4 mentions · first linked 2016-03-28
- Docker Enterprise Edition4 people · 4 mentions · first linked 2017-03-02
- Introducing Docker Content Trust4 people · 4 mentions · first linked 2015-08-12
- Docker 1.04 people · 4 mentions · first linked 2014-06-09
- Docker 1.10: New Compose file, improved security, networking and much more3 people · 4 mentions · first linked 2016-02-05
- Docker Responds to the Rocket Announcement3 people · 3 mentions · first linked 2014-12-01
What Hacker News says?
http://blog.docker.com/2014/06/docker-container-breakout-pro... But nothing is stopping you from creating a binary and running it as root that perhaps mounts those filesystems, or sends ioctls / badness to the kernel. I'm just shooting from the hip here and might be wrong, but I'm almost certain devices aren't namespaced. If you were to mknod a block device with the right major / minor numbers as the host's sda/sdb/…
Comment linking /2014/06/docker-container-breakout-proof-of-concept-exploit/
on “I was asked to crack a program in a job interview”Submitted In Memoriam: Ian Murdock as a story · 1457 points
HN discussionThis 1 page poorly titled wrong rant is the #2 story on this site? "Ever tried to security update a container?" lol. you are doing it wrong. "Essentially, the Docker approach boils down to downloading an unsigned binary, running it, and hoping it doesn't contain any backdoor into your companies network." nope https://blog.docker.com/2014/10/docker-1-3-signed-images-pro... "»Docker is the new 'curl | sudo bash'«" no…
Comment linking /2014/10/docker-1-3-signed-images-process-injection-security-options-mac-shared-directories/
on “The sad state of sysadmin in the age of containers”Submitted Docker for Mac and Windows Beta as a story · 904 points
HN discussionDocker didn't fuck up when they hired the square guys. http://blog.docker.com/2015/03/secured-at-docker-diogo-monic... I agree that security and provenance is a real issue in Docker. It is however being worked on, and it will be solved. Presumably we will end up with some sort of app-store like framework with proper signatures and verification. Docker can't do everything at once. Give them a chance. The new version…
Comment linking /2015/03/secured-at-docker-diogo-monica-and-nathan-mccauley/
on “The sad state of sysadmin in the age of containers”Submitted Au Revoir as a story · 898 points
HN discussionDocker's initial response: https://blog.docker.com/2014/12/initial-thoughts-on-the-rock...
Comment linking /2014/12/initial-thoughts-on-the-rocket-announcement/
on “CoreOS is building a container runtime, Rocket”Submitted Docker 1.0 as a story · 709 points
HN discussionDocker just posted a blog response http://blog.docker.com/2014/12/initial-thoughts-on-the-rocke...
Comment linking /2014/12/initial-thoughts-on-the-rocket-announcement/
on “CoreOS is building a container runtime, Rocket”Submitted Docker for Mac and Windows Is Now Generally Available and Ready for Production as a story · 599 points
HN discussionKompose has been around for a little while, which essentially "compiles" your docker-compose.yml into K8S config files. However, Docker recently announced ability to deploy directly from docker-compose: https://blog.docker.com/2018/12/simplifying-kubernetes-with-... My understanding is that you'll still need to do some work, especially if you are building via compose instead of pointing to an image on a registry.
Comment linking /2018/12/simplifying-kubernetes-with-docker-compose-and-friends/
on “DigitalOcean launches its container service”Submitted Docker and Microsoft partner to drive adoption of distributed applications as a story · 445 points
HN discussionAbility to go direct from docker-compose to Kubernetes (I believe kompose just compiles into k8s config files) was recently announced: https://blog.docker.com/2018/12/simplifying-kubernetes-with-...
Comment linking /2018/12/simplifying-kubernetes-with-docker-compose-and-friends/
on “DigitalOcean launches its container service”Submitted Intro Guide to Dockerfile Best Practices as a story · 436 points
HN discussionYou can actually go direct now: https://blog.docker.com/2018/12/simplifying-kubernetes-with-...
Comment linking /2018/12/simplifying-kubernetes-with-docker-compose-and-friends/
on “DigitalOcean launches its container service”Submitted Announcing Docker Machine, Swarm, and Compose for Orchestrating Distributed Apps as a story · 370 points
HN discussion> half git-syntax/half package manager-syntax is cumbersome to me. For what it does, the syntax seems pretty natural, but that's all subjective, so of course YMM(and clearly does)V. > Inability to compile Docker from source without using the Docker Project's provided "black box" binary Docker. I think this is more accurately phrased as "no simple documentation of the dependencies to build docker from source without…
Comment linking /2014/06/its-here-docker-1-0/
on “Docker 1.0”Submitted Docker Betas for AWS, Azure, Mac, and Windows as a story · 314 points
HN discussion> Inability to compile Docker from source without using the Docker Project's provided "black box" binary Docker. You can compile it from source (assuming you have a go environment and set GOPATH properly): $ sudo apt-get install libdevmapper-dev libsqlite3-dev btrfs-tools $ go get -u github.com/dotcloud/docker/docker docker will be in your $GOPATH/bin > GO Lang is still pretty obscure for most developers, and an int…
Comment linking /2014/03/docker-0-9-introducing-execution-drivers-and-libcontainer/
on “Docker 1.0”Submitted Announcing Docker 1.9: Production-Ready Swarm and Multi-Host Networking as a story · 311 points
HN discussionThanks. Yeah, most of the misconceptions seem to come from folks without previous experience with self-managed virtualized setups. Those that have had that experience usually already understand the complexities involved. I'd also love to hear more stories about Docker vs the other virtualized setups. It generally seems to be a dramatic improvement in usability, performance, etc, but I'd love to hear more about the s…
Comment linking /2013/12/baidu-using-docker-for-its-paas/
on “Docker 1.0”Submitted Improving Docker with Unikernels: Introducing HyperKit, VPNKit and DataKit as a story · 292 points
HN discussionYep, I was wrong, http://blog.docker.com/2014/06/its-here-docker-1-0/ I was just a little skeptical since there wasn't an official blog post to go with it
Comment linking /2014/06/its-here-docker-1-0/
on “Docker 1.0”Submitted Docker 1.12: Now with Built-In Orchestration as a story · 275 points
HN discussionI'm reading that it's only for Docker EE or Docker Desktop (Mac/Windows). https://forums.docker.com/t/is-there-a-built-in-kubernetes-i... https://blog.docker.com/2018/07/kubernetes-is-now-available-... I just installed Docker via package manager so I guess I never really learned about the organization's offerings in total and didn't know which product I had (CE for Linux). Is there a more up-to-date/better practice…
Comment linking /2018/07/kubernetes-is-now-available-in-docker-desktop-stable-channel/
on “Kubernetes Is a Surprisingly Affordable Platform for Personal Projects”Submitted LinuxKit: A Toolkit for Building Secure, Lean and Portable Linux Subsystems as a story · 269 points
HN discussionUntil fairly recently with docker enterprise, from what I've been able to gather Docker's official stance on Enterprise™-use has been "don't use docker, use runc, and build / orchestrate / etc it with kubernetes or something" which basically means "rewrite whatever you intend to use". (afaik this all changed with https://blog.docker.com/2018/04/announcing-docker-enterprise... ) Which is fine. "can execute binaries i…
Comment linking /2018/04/announcing-docker-enterprise-edition-2-0/
on “What we've learned from building Ghost after 5 years and $3M”Submitted Introducing Docker Secrets Management as a story · 264 points
HN discussionIt's based on the OS X sandbox and xhyve which is in turn is based on bhyve https://blog.docker.com/2016/03/docker-for-mac-windows-beta/
Comment linking /2016/03/docker-for-mac-windows-beta/
on “Docker for Mac and Windows Is Now Generally Available and Ready for Production”Submitted Docker 1.6: Engine and Orchestration Updates, Registry 2.0, and Windows Client as a story · 258 points
HN discussion
