kengibson1111/basedev repository overview

This image derives from alpine. basedev has ruby 3.4.4 and mdl 0.13.0 installed. While very streamlined, this image inherits any vulnerabilities from alpine. This is easy to find and usually fix in the image. Three handy commands help identify vulnerabilities:

docker scout overview kengibson1111/basedev
docker scout cves kengibson1111/basedev
docker scout recommendations kengibson1111/basedev

The challenge can be at the fine-grained package level - not all apk packages have vulnerability fixes from the default mirror at the same time. For example, alpine may have a latest package update available from the default mirror before a fine-grained package like alpine's binutils. Images should be checked often with the commands above to correct vulnerabilities as soon as possible.

This image has four volumes in the docker run command. The first volume will map to /root and contain common files typically stored in a user's home directory. The second volume will map to /var/local/myprojects. The third volume is unique to docker commands within the container. The fourth volume is for kubectl commands within the container - it is the parent directory of .kube directory. In the container, the KUBECONFIG environment variable is set to /var/local/kubeparent. I use this image for GitHub container-based development using VS Code. With the last two volume mappings, I can load projects that directly use docker and kubectl.

docker run -it --rm -v <local directory to store container user-home common files>:/root -v <local directory to store project files>:/var/local/myprojects -v //var/run/docker.sock://var/run/docker.sock -v <local parent directory of .kube directory>:/var/local/kubeparent kengibson1111/basedev