3 Ways CARIAD Configures Docker Business for Security and Compliance

  • Post author:
  • Post category:Web Runtime

CARIAD, an automotive software and technology company, unites more than 6,000 global experts and aligns major brands in the Volkswagen Group under one software strategy. Founded in 2020, CARIAD provides solutions to securely and compliantly update the fleet from mere transport to fully integrated digital experiences. CARIAD’s use of Docker…

Continue Reading3 Ways CARIAD Configures Docker Business for Security and Compliance

Empowering Developers with Docker: Simplifying Compliance and Enhancing Security for SOC 2, ISO 27001, FedRAMP, and More

  • Post author:
  • Post category:Web Runtime

The compliance and regulatory landscape is evolving and complicated, and the burden on developers to maintain compliance is not often acknowledged in articles about maintaining SOC 2, ISO 27001, FedRAMP, NIS 2, EU 14028, etc.  Docker’s products aim to put power into the developer’s hands to maintain compliance with these…

Continue ReadingEmpowering Developers with Docker: Simplifying Compliance and Enhancing Security for SOC 2, ISO 27001, FedRAMP, and More

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine

  • Post author:
  • Post category:Web Runtime

Certain versions of Docker Engine have a security vulnerability that could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users. Problem Docker’s default…

Continue ReadingDocker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine

Local LLM Messenger: Chat with GenAI on Your iPhone

  • Post author:
  • Post category:Web Runtime

In this AI/ML Hackathon post, we want to share another winning project from last year’s Docker AI/ML Hackathon. This time we will dive into Local LLM Messenger, an honorable mention winner created by Justin Garrison. Developers are pushing the boundaries to bring the power of artificial intelligence (AI) to everyone.…

Continue ReadingLocal LLM Messenger: Chat with GenAI on Your iPhone

SSL/TLS Certificate Rotation Without Restarts in NGINX Open Source

  • Post author:
  • Post category:Web Runtime

In the world of high-performance web servers, NGINX is a popular choice because its lightweight and efficient architecture enables it to handle large loads of traffic. With the introduction of the shared dictionary function as part of the NGINX JavaScript module (njs), NGINX’s performance capabilities reach the next level. In…

Continue ReadingSSL/TLS Certificate Rotation Without Restarts in NGINX Open Source

Server-Side WebAssembly with NGINX Unit

  • Post author:
  • Post category:Web Runtime

WebAssembly (abbreviated to Wasm) has a lot to offer the world of web applications. In the browser, it provides a secure, sandboxed execution environment that enables frontend developers to work in a variety of high-level languages (not just JavaScript!) without compromising on performance. And at the backend (server-side), WebAssembly’s cross-platform…

Continue ReadingServer-Side WebAssembly with NGINX Unit

CVE-2024-39908 : DoS in REXML

  • Post author:
  • Post category:Web Runtime

There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-39908. We strongly recommend upgrading the REXML gem. Details When it parses an XML that has many specific characters such as <, 0 and %>. REXML gem may take long time. Please update REXML…

Continue ReadingCVE-2024-39908 : DoS in REXML

Docker Best Practices: Choosing Between RUN, CMD, and ENTRYPOINT

  • Post author:
  • Post category:Web Runtime

Docker’s flexibility and robustness as a containerization tool come with a complexity that can be daunting. Multiple methods are available to accomplish similar tasks, and users must understand the pros and cons of the available options to choose the best approach for their projects. One confusing area concerns the RUN,…

Continue ReadingDocker Best Practices: Choosing Between RUN, CMD, and ENTRYPOINT

How an AI Assistant Can Help Configure Your Project’s Git Hooks

  • Post author:
  • Post category:Web Runtime

This ongoing Docker Labs GenAI series will explore the exciting space of AI developer tools. At Docker, we believe there is a vast scope to explore, openly and without the hype. We will share our explorations and collaborate with the developer community in real-time. Although developers have adopted autocomplete tooling…

Continue ReadingHow an AI Assistant Can Help Configure Your Project’s Git Hooks