Building Reproducible AI Evaluation Workflows with Docker Sandboxes
Learn how Docker Sandboxes can make AI evaluation workflows more reproducible with consistent execution, structured artifacts, and runtime evidence.
Docker Blog
DevOps
Auto-aggregated global tech articles · 46 posts
Moving from Minimus to Docker Hardened Images
The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start.
Docker Blog
MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS
MinIO reached end of life in February 2026. Docker Extended Lifecycle Support (ELS) keeps end-of-life software like it patched, compliant, and audit-ready for up to five years, covering versions upstream no longer supports all the way up to entire projects.
Docker Blog
Running AI agents in GitHub Actions with Docker Sandboxes
Run AI agents in GitHub Actions with Docker Sandboxes. See how isolated agents can run Testcontainers tests, fix code, and open draft pull requests.
Docker Blog
Docker Verified Publisher Applications Are Now Self-Serve
Apply to become a Docker Verified Publisher (DVP) now directly through Docker Hub. Get your verified content seen first by devs looking for trusted options.
Docker Blog
Coding Agent Horror Stories: The Command You Already Approved
Learn how AI coding agents can run attacker code through commands you already approved and how Docker Sandboxes limit what an attack can reach.
Docker Blog
Make zero CVEs your new default
Supply-chain attacks have kept escalating while AI writes more of the code you ship. Docker's latest updates bring more software built from source into your images, keep security coverage running past end of life, carry every guarantee through your customized images, and move policy enforcement onto
Docker Blog
Modernizing the Meta Ads Service With an Open-Source Kernel Scheduler
TL; DR At Meta’s scale, a few milliseconds of latency degradation can have a significant negative impact on ads performance. When a Linux kernel upgrade risked regressing latency across Meta’s ad serving fleet, we turned to sched_ext — the upstream, BPF-based extensible scheduling framework — to bu
Meta Engineering
How Netflix Simplified Batch Compute with Kueue
By Alvin Bao, Alex Petrov, Jennifer Lai, Aidan Sherr, and Samartha ChandrashekarAs a part of the journey to transition Netflix’s compute infrastructure to be more Kubernetes-native, we have leaned into incorporating components from the Kubernetes ecosystem into our container platform Titus. One exam
Netflix TechBlog
Sitar-agent: Building a reliable dynamic configuration sidecar at scale
How Airbnb built a Kubernetes sidecar to deliver dynamic configuration reliably at scale.By: Bo Teng, Cosmo Qiu, Siyuan Zhou, Ankur Soni, Xin Huang, Willis HarveyIntroductionIn our previous post, we explored Airbnb’s dynamic configuration system, Sitar, with a focus on service architecture and confi
Airbnb Engineering