Lockdown your Dockerized build environments --- Because privileged mode is insecure, you should restrict your CI/CD environments to known users and projects. If this isn't feasible, then instead of using Docker, you could try using a standalone image builder like Buildah to eliminate the risk. Alternatively, configuring rootless Docker-in-Docker can mitigate some --- but not all --- of the security concerns... - Source: dev.to / about 1 month ago

In my experience, not using docker to build docker images is a good idea. E.g. buildah[0] with chroot isolation can build images in a GitLab pipeline, where docker would fail. It can still use the same Dockerfile though. If you want to get rid of your Dockerfiles anyway, nix can also build docker images[1] with all the added benefits of nix (reproducibility, efficient building and caching, automatic layering,... - Source: Hacker News / 8 months ago

Buildah: This lightweight, open-source command-line tool for building and managing container images. It is an efficient alternative to Docker. With Buildah, you can build images in various ways, including using a Dockerfile, a podmanfile or by running commands in a container. Buildah is a flexible, secure and powerful tool for building container images. - Source: dev.to / about 1 year ago

When I saw the title I thought it was going to be about `buildah` [1][2] Which allows you to create images using the command line to build them up step-by-step. [1] https://buildah.io/. - Source: Hacker News / over 1 year ago

Buildah is a "tool that facilitates building OCI images" of Containers. If it is not installed, podman system migrate will print out the warning:. - Source: dev.to / over 1 year ago

Based on the fact that your ideal is to have a similar experience to heroku than managing your own server setting up reverse proxies take a look at these options: 1) https://dokku.com - lets you turn your light sail instance basically into heroku 2) https://render.com 3) https://fly.io above is not what I do but would be the options I would pursue if I understand your preference and requirement correctly. - Source: Hacker News / 10 months ago

Elastic Beanstalk (EB) is a cloud deployment service provided by Amazon Web Services. It facilitates the deployment and scaling of web applications and services by automating the creation of individual infrastructure components, including EC2 instances, auto-scaling, ELBs, security groups, and other infrastructure components. Using the AWS Management Console and command-line interface, deployment with EB is quick... - Source: dev.to / about 1 year ago

This Terraform code snippet can be used to deploy an AWS Elastic Beanstalk environment:. - Source: dev.to / about 1 year ago

K8s isn't going to play well with your deployment pattern without some advanced cluster management. Honestly it seems like you would be better serviced with something like https://aws.amazon.com/elasticbeanstalk/ . Source: about 1 year ago

If your project is a bit more complicated using next.js or react.js or angular.js, you may find some free Platfrom-as-a-Service%20is%20a%20complete%20cloud%20environment,middleware%2C%20tools%2C%20and%20more.). I have seen some of my peers using free PaaS like Heroku, Vercel and I have no experience in using PaaS but I will recommend you to use PaaS from either of the three 1. Google Cloud's Google App Engine 2.... Source: over 1 year ago