Setting Docker Hardened Images free | Tushar Jain, EVP of Engineering at Docker

Описание: In May of 2025, Docker launched Hardened Images, a secure, minimal, production-ready set of images. In December, they made DHI freely available and open source to everyone who builds software. On this episode, we're joined by Tushar Jain, EVP of Engineering at Docker to learn all about it.

SUBSCRIBE:

RSS: https://changelog.fm/rss
Apple: https://changelog.fm/apple
Spotify: https://changelog.fm/spotify
Android: https://changelog.fm/android
Overcast: https://changelog.fm/overcast
Email: https://changelog.fm/email
X: https://x.com/changelog
Bluesky: https://bsky.app/profile/changelog.com
Mastodon: https://changelog.social/@changelog

SPONSORS:

Tiger Data - Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. https://www.tigerdata.com

Namespace - Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. https://namespace.so

NordLayer - Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code `changelog-10-NORDLAYER`. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog https://nordlayer.com/thechangelog

Fly.io - *The home of Changelog.com* — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. https://fly.io/

LINKS:

https://www.docker.com/blog/docker-ha...
https://hub.docker.com/hardened-image...

CHAPTERS:

00:00 Start the show!
01:04 What are hardened images?
03:14 From paid to free
06:11 SBOM and SLSA
09:39 Why switch to DHI? Why not?
11:46 The public reception
13:43 Announcing in Dec...
15:15 Changing defaults
17:52 TTS (time-to-shipping)
23:13 VEX
28:15 A lot more to do
34:06 Perusing the DHI catalog
36:24 Scout health scores
39:44 The ecosystem
42:11 What partners get
43:53 A manifesto
48:22 What's next?
51:06 Start green, stay green
52:55 Docker for AI
1:04:47 The future
1:07:47 Wrapping up