Best practices for @NodeJS Docker Containers? 🔥🐳 Day 1/14 - let's begin This Dockerfile has many issues. Using non-deterministic images, npm packages, & Node.js abruptly halts. Tomorrow we'll begin fixing. Follow & Tune-in for how to fix it 🙏 #NodejsDockerBestPractices

Day 4/14: best practices for @NodeJS Docker Containers 🐳 👎 still running npm install inside container images? don't ✅ npm ci --only=production deterministic production dependencies & faster installs Let's see the best practices tmrw brings 😉 #NodejsDockerBestPractices

Day 6/14: best practices for @NodeJS Docker Containers 🐳 ⚠️ Be careful of privilege escalation & container escape ✅ Official Node.js docker images include a low-privileged user called node. Use it. Tomorrow's tweet is all about scalable Node.js #NodejsDockerBestPractices

Day 12/14: best practices for @NodeJS Docker Containers 🐳 Many were not were of this one... I bet you didn't know you can temporarily mount secrets to a specific layer 😯 ✅ Safely use secrets in a Docker image build Hope it is useful for y'all 🙏 #NodejsDockerBestPractices

Day 5/14: best practices for @NodeJS Docker Containers 🐳 😕 why and how to use NODE_ENV? ✅ ENV NODE_ENV production - ensures that libraries that rely on this variable are optimized for production use Stay tuned for tomorrow's best practices 😉 #NodejsDockerBestPractices

Day 3/14: best practices for @NodeJS Docker Containers 🐳 ✅ Use small base images with minimal software footprint (less risky vulnerabilities) ✅ Use specific base images (deterministic image builds) What else can go wrong? follow along 😉 #NodejsDockerBestPractices

Day 9/14: best practices for @NodeJS Docker Containers 🐳 😕 Security vulnerabilities exist in your Node.js docker image ✅ Use 🐶 @snyksec to find the best image to use (it's free to use!) How are you liking base image remediation with Snyk? #NodejsDockerBestPractices

Day 7/14: best practices for @NodeJS Docker Containers 🐳 😞 Don't want to abruptly drop clients? ✅ Use the tiny init system dumb-init to safely forward events like SIGINT to your Node.js runtime Tomorrow's tweet is on-brand with graceful shutdown #NodejsDockerBestPractices

Day 11/14: best practices for @NodeJS Docker Containers 🐳 😯 Are you keeping unnecessary files out of your Node.js Docker images? ✅ Use a .dockerignore file to avoid sensitive and unneeded files Congrats on following up this far! 🎉😁 #NodejsDockerBestPractices

Day 8/14: best practices for @NodeJS Docker Containers 🐳 ✅ Today is about graceful tear down for your Node.js web applications Are you cleaning up resources before shutting down? Tomorrow's tweet is easy security with @snyksec 😉 #NodejsDockerBestPractices

Day 12/14 Best practices for @NodeJS Docker Containers 🐳 💚 I bet you didn't know you can temporarily mount secrets to a specific layer 🔥 Safely mount secrets into the Docker build image Follow-up reading: https://t.co/KFMJ2Of1xq #NodejsDockerBestPractices

Day 10/14: best practices for @NodeJS Docker Containers 🐳 All around good practices when you are building docker images: If you use multi-stage builds Then ✅ you avoid accidental secrets leaking ✅ you avoid big software footprint #NodejsDockerBestPractices

Day 10/14 Best practices for @NodeJS Docker Containers 🐳 💚 ✅ Use multi-stage builds ✅ Avoids accidental secrets leaking ✅ Avoids big software footprint Follow-up reading: https://t.co/KFMJ2Of1xq #NodejsDockerBestPractices

Day 14/14 LAST DAY! Best practices for @NodeJS Docker Containers 🐳 💚 - Have fun learning about Node.js & Docker security on the @snyksec blog: https://t.co/ntkdWTOWu9 - Follow @FrancescoCiull4 @pmckee Follow-up reading: https://t.co/KFMJ2Of1xq #NodejsDockerBestPractices

Day 14/14: best practices for @NodeJS Docker Containers 🐳 That's all and thanks for staying tuned 🙌 - Have fun learning about Node.js & Docker security on the @snyksec blog: https://t.co/KFMJ2Of1xq - Follow @FrancescoCiull4 @pmckee @urlichsanais #NodejsDockerBestPractices