Secure your container stack from the base image down. Docker Hardened System Packages offer multi-distro, secure-by-default components with near-zero CVEs.

Docker offers insights into container technology, microservices architecture, and application deployment, providing documentation and best practices for building, deploying, and managing containerized applications. By exploring Docker's curated content, developers can learn about container orchestration, Docker Swarm, and Docker Compose for managing complex containerized environments. Whether you're deploying microservices, building CI/CD pipelines, or optimizing your development workflow, Docker offers resources to streamline your containerization journey and unlock the benefits of container-based deployment.

Docker

Docker is announcing Hardened System Packages, extending its Docker Hardened Images (DHI) security guarantees beyond base images to over 8,000 Alpine packages (with Debian coming soon). Each package is source-built by Docker, cryptographically attested, and backed by SLSA Build Level 3 verification. This allows teams to customize DHI base images with additional packages while maintaining near-zero CVE guarantees and a complete provenance chain. Docker is also introducing a new pricing tier called DHI Select at $5,000 per repo for SLA-backed CVE remediation, alongside the existing free DHI Community tier and DHI Enterprise. The DHI catalog has grown to over 2,000 hardened container images, with notable adopters including Adobe, n8n.io, and Medplum.

Docker Hardened System Packages

Your Package Manager, Now with a Security Upgrade

Docker Hardened System Packages: Going deeper into the container

Making enterprise-grade security even more accessible

Build with the standard that’s redefining container security