tag: docker
- One Evening, Three Problems: Mail Down, Memory Full, Wrong Docker Arch Incident log from a 4GB single-node k0s box: snappymail OOMKilled loop, 163% memory overcommit, swap thrashing disguised as disk I/O, and a docker buildx arch mismatch.
- Deploying to k0s with a shell script instead of CI/CD One shell script, a self-hosted Docker registry, and envsubst. No GitHub Actions, no ArgoCD — here's why that's enough.
- Self-hosted Docker registry inside the k0s cluster registry:2 on NodePort 30500, no external dependencies for deploys, and automatic cleanup of old image tags.
- GitLab CI DinD: Docker builds with BuildKit caching Docker-in-Docker setup with TLS, registry layer caching with mode=max, registry mirror to bypass DockerHub rate limits, multi-arch builds with QEMU, and Trivy scan in the same pipeline.
- Self-hosted Docker registry in Kubernetes: setup, auth, and cleanup registry:2 on a NodePort, PVC storage, insecure-registries config for Docker hosts, CI runner push workflow, imagePullSecret, and weekly garbage collection CronJob for deleted blobs.
- Multi-stage Dockerfile for .NET: build once, run lean Three-stage pattern with restore/build/runtime layers, cache optimization by separating project files from source code, non-root user, readOnlyRootFilesystem, BuildKit registry caching in GitLab CI.
- GitLab CI Docker deploy pipeline: build, push, and rolling update Full GitLab CI pipeline for containerized apps: Docker build with BuildKit layer caching, push to private registry, kubectl rollout with SHA-pinned image tags, multi-environment promotion, and registry cleanup job.
- imagePullSecrets at scale: Kustomize secretGenerator across namespaces Kustomize secretGenerator for Docker registry credentials, namespace-targeted patches, service account imagePullSecrets injection, and managing secrets across many namespaces without duplication.
No posts match the selected filters.