Best of Docker — April 2026

  1. 1
    Video
    Avatar of techworldwithnanaTechWorld with Nana·3w

    STOP Learning Kubernetes (Do This First)

    Most DevOps jobs don't require deep Kubernetes expertise — it's often listed as a buzzword in job descriptions. The recommended learning path is: cloud fundamentals first, then infrastructure as code, then Docker container basics, and only then Kubernetes fundamentals (pods, deployments, services). Deep Kubernetes knowledge (operators, CRDs, cluster architecture) is only needed for specialized roles like Kubernetes administrator or platform engineer. The post ends with a promotion for free orientation calls to help engineers structure their DevOps learning path.

  2. 2
    Article
    Avatar of xda-developersXDA Developers·1w

    I’d do these 5 things differently if I started self-hosting LLMs today

    Lessons learned from months of self-hosting LLMs distilled into five practical changes: adopting Docker-only deployment for stability, documenting every configuration detail from the start, building agent-first infrastructure with tools like AgenticSeek and n8n instead of just chat interfaces, avoiding model hoarding by keeping only a few reliable models, and focusing on workflow integration so the LLM is embedded in daily work rather than a separate destination.

  3. 3
    Video
    Avatar of devopstoolboxDevOps Toolbox·3w

    This S3 Alternative is INSANELY Lightweight (and 100% open source)

    A hands-on walkthrough of replacing AWS S3 with RustFS, an open-source, S3-compatible object storage solution written in Rust. Covers Docker Compose deployment, bucket creation, access key management, remote access via Caddy reverse proxy and DNS, pre-signed URLs, IAM-style policies, tiered storage, and integrating Restic for encrypted periodic backups. Benchmarks show RustFS outperforms MinIO for small-file workloads. The Apache 2 license is discussed as a safe choice for commercial and private use. Motivated by real-world cost savings — one team saved $1.5M/year by leaving S3.

  4. 4
    Article
    Avatar of xda-developersXDA Developers·4w

    I replaced Portainer, Grafana, and Prometheus with this stack

    A home lab enthusiast shares their switch from Portainer, Grafana, and Prometheus to a lighter trio: Dockhand for container management, Beszel for system monitoring, and Glance for a unified dashboard. The new stack uses fewer resources, offers better visuals out of the box, and is more beginner-friendly for small-scale self-hosted setups on low-end hardware like Raspberry Pi or mini PCs.

  5. 5
    Article
    Avatar of phpdevPHP Dev·1w

    DebugPHP — Docker support is here.

    DebugPHP Server now supports Docker with a three-command setup using Dockerfile and Compose config. Setting `dockerized: true` in the client config enables automatic server discovery by probing `debugphp-server`, `host.docker.internal`, and `127.0.0.1` in sequence, with results cached for an hour to eliminate per-request overhead. No hardcoded IPs or manual host configuration required.

  6. 6
    Article
    Avatar of collectionsCollections·4w

    Docker Offload is now generally available: run Docker Desktop with a cloud-hosted engine

    Docker Offload is now generally available, moving the Docker container engine from local machines to Docker's cloud infrastructure. Developers on VDI platforms, locked-down laptops, or restricted networks can use Docker Desktop without workflow changes — CLI, UI, bind mounts, port forwarding, and Compose all work as before. Sessions run in isolated, temporary environments over encrypted tunnels on SOC 2 certified infrastructure with centralized audit logging. Two deployment tiers are offered: multi-tenant for most enterprise teams and single-tenant dedicated VPCs for regulated industries. It integrates with existing IAM and SSO policies and is an add-on to Docker Business. Upcoming features include BYOC support, CI/CD integration with GitHub Actions and GitLab CI, and GPU-backed instances for AI/ML workloads.

  7. 7
    Article
    Avatar of cloudnativenowCloud Native Now·1w

    Dockerfile Practices are a DevOps Tax Before They are a Security Concern

    Poor Dockerfile practices create measurable DevOps costs — slow builds, bloated images, and cross-environment inconsistencies — long before they become security concerns. Common anti-patterns include unpinned base images, incorrect layer ordering (copying source before installing dependencies), and missing .dockerignore files. A real-world case study from Hypersequent shows CI builds dropping from 12–16 minutes to 3.5–4.5 minutes and image sizes shrinking 60–75% after enforcing multi-stage builds, dependency-before-source ordering, and aligned caching strategies. DockSec, an OWASP Incubator Project, combines Trivy, Hadolint, and Docker Scout with an AI layer to surface Dockerfile anti-patterns in plain language at the pull request stage, making remediation accessible to developers without deep container expertise.

  8. 8
    Article
    Avatar of selfhstselfh.st·1w

    Self-Host Weekly (24 April 2026)

    A weekly self-hosting newsletter covering notable events from the week of April 24, 2026. Highlights include Microsoft's controversial GitHub CLI telemetry opt-in, a Bitwarden CLI supply chain compromise, a DDoS attack on Mastodon's flagship server, and the ongoing dispute between Nextcloud, LibreOffice, Collabora, and Euro-Office. Also featured is Anchor, a new offline-first self-hosted note-taking app deployable via Docker, plus a curated list of self-hosting videos and a quick CLI tip for the mkdir -p flag.

  9. 9
    Article
    Avatar of selfhstselfh.st·3w

    Self-Host Weekly (27 March 2026)

    A weekly self-hosting newsletter covering GitHub Copilot's new AI training opt-out setting, OpenAI shutting down Sora and pivoting to coding tools, LibreOffice's response to donation banner complaints, a critical Dockhand security release, Booklore's discontinuation and emerging forks (Grimmory, BookLite), Plex mobile metadata editing, a Zoom privacy scandal, and a spotlight on Kaneo, a self-hosted project management tool. Also includes curated videos on WireGuard, Proxmox vs XCP-ng, and homebrew routers following the FCC ban on Chinese-made consumer routers.

  10. 10
    Article
    Avatar of netflixNetflix TechBlog·7d

    Scaling Camera File Processing at Netflix

    Netflix's Media Production Suite (MPS) integrates FilmLight's API (FLAPI) to handle camera file processing at scale across hundreds of productions globally. The system automates inspection of camera metadata on ingest, generates VFX plates and deliverables using open standards like ACES and ASC FDL, and runs as serverless Docker-based functions on Netflix's Cosmos compute platform. By using CPU-only cloud instances and elastic scaling, Netflix achieves parallel processing of thousands of renders during peak workloads without fixed hardware constraints. The partnership with FilmLight allows Netflix to focus on workflow orchestration while leveraging FilmLight's deep camera format expertise, reducing manual effort and turnaround times for productions worldwide.

  11. 11
    Article
    Avatar of foojayioFoojay.io·4d

    Dockerizing a Java 26 Project with Docker Init

    A step-by-step guide to containerizing a Java 26 Spring Boot project using Docker Init, the interactive wizard introduced in Docker Desktop 4.27. Docker Init automatically generates a multi-stage Dockerfile, compose.yaml, .dockerignore, and README. The guide covers project setup via Spring Initializr, running docker init, understanding the generated four-stage Dockerfile (dependency resolution, compilation, Spring Boot layer extraction, and minimal runtime image with a non-root user), and a workaround for Java 26 base images using SAP Machine instead of Eclipse Temurin while the latter catches up. A simple REST controller is added to verify the running container.

  12. 12
    Article
    Avatar of freecodecampfreeCodeCamp·1w

    How I Built a Production-Ready CI/CD Pipeline for a Monorepo-Based Microservices System with Jenkins, Docker Compose, and Traefik

    A comprehensive guide to building a production-ready CI/CD pipeline for a monorepo-based microservices system on a single Linux server. Covers running Jenkins in Docker, using Traefik as a reverse proxy with auto-renewing Let's Encrypt HTTPS certificates, and writing a Jenkinsfile that detects which microservices changed per commit and redeploys only those affected services. Includes full Docker Compose configurations, step-by-step Jenkins setup, GitHub webhook integration, a detailed troubleshooting section covering real production errors (dubious ownership, SSH vs HTTPS auth, missing Compose plugin, timezone issues, pnpm timeouts), and a host-vs-container mental model reference table.

  13. 13
    Article
    Avatar of atomicobjectAtomic Spin·2w

    K3s: A Better Way to Deploy a Docker App to a Linux Server

    A step-by-step guide to deploying a Dockerized web app on a single Linux server using K3s (lightweight Kubernetes), Helm, Zot (private OCI registry), and CloudNativePG. The guide walks through installing a single-node K3s cluster, setting up a private container registry with Zot, deploying a managed PostgreSQL instance via the CloudNativePG operator, and packaging the app as a Helm chart with automatic database wiring. The full stack runs on 2–4GB RAM and provides a scalable, standards-based alternative to ad-hoc deployment methods like Docker Compose or systemd services.

  14. 14
    Article
    Avatar of selfhstselfh.st·3w

    Self-Host Weekly (10 April 2026)

    This week's self-hosting newsletter covers the escalating conflict between The Document Foundation (LibreOffice) and Collabora Online, which has resulted in Collabora's members being removed from the community and plans for a new fork. Also covered: Immich's upcoming managed backup service, controversy around email host MXroute's founder doxxing a customer, ErsatzTV's archival and potential reboot, Tailscale's updated pricing (free plan now allows 6 devices), and Pushover's improved API quota system. A spotlight on Chibisafe, a self-hosted file sharing platform, rounds out the issue.

  15. 15
    Video
    Avatar of christianlempaChristian Lempa·1w

    Caddy: Everyone Says It’s the EASIEST… I Tested It

    A hands-on walkthrough of the Caddy web server and reverse proxy, covering installation on Ubuntu via package manager, basic static site hosting with automatic HTTPS via Let's Encrypt, and reverse proxying Docker containers. The author highlights Caddy's simplicity for straightforward setups but identifies two pain points: DNS challenge support requires rebuilding the binary with xcaddy and a DNS provider plugin, and Docker-first workflows lack native label-based routing (unlike Traefik). A community project called caddy-docker-proxy partially addresses the Docker label issue but doesn't include DNS challenge support out of the box. The author concludes Caddy is excellent for simple non-Docker deployments but prefers Traefik for containerized environments.

See all Docker archives