Docker: Guides and Practical Know-how | Page 16 | mironsoft Blog
Docker
-
Jun 2, 2025
A local development environment built with Docker Compose is more than a running container. Get bind mounts wrong and you lose performance. Hardcode secrets in the compose file and you put the whole project at risk. Skip an onboarding concept and you lose hours with every new team member. This guide shows how to get it right from day one.
-
Jun 1, 2025
A ten-minute pipeline that runs fifty times a day costs a team over eight hours of waiting daily. Systematic optimization does not start with guessing, it starts with measuring.
-
Jun 1, 2025
Local Docker development environments running several projects need a reverse proxy that routes domains to containers and manages HTTPS certificates. Traefik and nginx-proxy solve the same problem with fundamentally different approaches. This article shows which proxy is the better choice in which scenario.
-
May 19, 2025
Running tests directly in the IDE with a single click or keyboard shortcut, without ever opening a console, is a productivity gain that quickly becomes second nature. PhpStorm supports PHPUnit for Docker-based Magento setups completely, as long as the remote interpreter and the run configuration are set up correctly. This article walks through the full setup process.
-
May 18, 2025
A dashboard nobody looks at at night does not help in an incident. Resource alerting for containers with Prometheus rules and Alertmanager automatically reports CPU bottlenecks, memory pressure and restart loops, groups related alerts, and uses silencing and inhibition to prevent a single incident from flooding the team with dozens of notifications.
-
May 15, 2025
A freshly installed PHPStorm without a checklist costs hours: wrong interpreter, too much indexed vendor bulk, no Xdebug, no run configurations. This checklist covers all the critical settings, in the order that matters most for Docker Magento projects.
-
May 13, 2025
A Docker image is only as secure as its base image and the system packages installed inside it, and that is exactly where many vulnerabilities hide that neither SAST nor Dependency Scanning catch, since both focus on application code and language packages. GitLab's Container Scanning closes this gap by checking the fully built image directly in the pipeline against a vulnerability database. This article covers the integration, the difference to a standalone tool like Trivy, and how the results end up in the merge request widget.
-
May 11, 2025
A single container without limits can bring an entire host to its knees. Understanding Docker CPU and memory limits prevents resource monopolies, makes capacity planning measurable, and protects every service on the same host, not just your own.
-
May 9, 2025
A container that runs as root, with every Linux capability and a writable filesystem, is technically speaking a privileged process behind a thin namespace curtain. Docker offers several complementary security layers: a non-root USER, minimal capabilities, a read-only filesystem, and seccomp profiles. This article shows how these layers work and how to implement them in real Dockerfiles and Compose configurations.
-
May 9, 2025
A multi-stage Dockerfile consistently separates the build environment from the runtime. Builder stages with Composer, npm and build tools hand their output forward, without ever landing in the final image themselves. The result: smaller images, less attack surface and reproducible builds for PHP and Node projects.