Lectures 16 and 17 discuss Alpine, CentOS, CVE scanners, etc.

Some updates for 2023 are due:

• Replace CentOS with Ubuntu and/or Wolfi base images
• CVE Scanners now work with Alpine

Aqua Microscanner has been deprecated for a few years and moved to Trivy. I have an example Trivy Dockerfile. I also have an example GitHub Action calling workflow that calls a reusable Trivy workflow.

• Add a written lecture preceding the outdated one describing the change
• Update source code example to point to updated Trivy example
• Replace lecture video part about Microscanner with Trivy

Original Q&A

https://github.com/BretFisher/docker-mastery-for-nodejs/blame/1fdac1a82516b14ebf5ab811e9bda6dc806dafca/typescript/Dockerfile#L19

In lecture 49 "Bind-Mounting Code, Optimizing for Performance"

• Replace Windows info with WSL info
• Remove :delegated info

Original Q&A 1, 2

Docker's fixed the issue with WORKDIR ignoring USER when creating directories.

Prior to this fix, if you did this, you'd get access denied:

USER node 
WORKDIR /app
RUN touch /app/makfile

Today, you can it and the file would get created.

• add a written lecture explaining the change
• replace the lecture video for Working With Node User Limits
• update answer in this repository

Original Q&A

Please check this out. This folder does not exist.

On line

There are two ways to fix that:

1. Use COPY --from=dev /opt/node_modules/ /opt/node_modules/ in test stage to combine the node modules.

2. Have dev stage install all npm dependencies (remove --only=development) and then change the test stage to FROM dev as @ivorscott suggested (I like this the most).

Hi Bret,

Thanks for this course it's super useful! I was also watching your talk: https://youtu.be/Zgx0o8QjJk4?t=1906 and see you've used in this course and in your talk recommended version 2 for Docker Compose files. However in the official Docker documentation they recommend v3:

https://docs.docker.com/compose/compose-file/compose-versioning/

Looking the the changes I can't see anything that talks about giving up local dev only concerns that you allude to in your talk. Are you able to expand on this a little more; whether this is still applicable today, especially if you're using Amazon ECS for example?

Kind regards

~/Developer/GitHub/docker-mastery-for-nodejs/assignment-dockerfile
Marks-MacBook-Pro[11:00:36] node app.js
internal/modules/cjs/loader.js:615
throw err;
^

Error: Cannot find module 'hapi'

Hey Bret,
At the end of the video you did not try to build the dockerfile. It's not working here.

FROM node:10-slim

EXPOSE 3000

WORKDIR /node

COPY package*.json ./

RUN mkdir app && chown -R node:node .

USER node

RUN npm install && npm cache clean --force

WORKDIR /node/app

COPY --chown node:node . .
CMD ["node", "app.js"]

ERROR

➜ docker build -t user-node .
Sending build context to Docker daemon  29.18kB
Step 1/10 : FROM node:10-slim
 ---> 914bfdbef6aa
Step 2/10 : EXPOSE 3000
 ---> Using cache
 ---> 1f99a8debe3f
Step 3/10 : WORKDIR /node
 ---> Using cache
 ---> f42054115526
Step 4/10 : COPY package*.json ./
 ---> Using cache
 ---> f47e03cafb04
Step 5/10 : RUN mkdir app && chown -R node:node .
 ---> Using cache
 ---> ce303b5752ff
Step 6/10 : USER node
 ---> Using cache
 ---> f2569831d8cb
Step 7/10 : RUN npm install && npm cache clean --force
 ---> Using cache
 ---> efdc76fb5ee5
Step 8/10 : WORKDIR /node/app
 ---> Using cache
 ---> 0945a9b679a3
Step 9/10 : COPY chown node:node . .
COPY failed: stat /var/lib/docker/tmp/docker-builder307331584/chown: no such file or directory

docker-mastery-for-nodejs/user-node on  master [!] is 📦 v1.0.0 via ⬢ v6.3.0 on 🐳 v18.09.2
➜ docker build -t user-node .
Sending build context to Docker daemon  29.18kB
Error response from daemon: Dockerfile parse error line 17: Missing a value on flag: chown

Cheers!
Pascal