Biography

Docker Captain and Community Leader, Rachid Zarouali is a former virtualization consultant and Instructor. After successful experiences in building and training the ops team of the French registry (AFNIC), and working as a C.I.O. for a worldwide recognized CRM and E-COMMERCE agency, he built his own company sevensphere. He aims at offering training and consultancy to company willing to use container technologies in production or migrate to cloud platform. Involved in different OSS communities, he teaches cloud computing architecture at a software engineering school in his spare time.

Workshop

Build a Secure and Efficient Supply-chain

Speaking about putting containers in production, we always hear the same keywords:

– CI/CD

– Supply-Chain

– Security

This workshop aims at clarifying what do those keywords really means when we work on putting containers in production and teaching how we can use open source tools to create a complete, secure and stable supply-chain.

We’ll learn everything needed to build, deploy and maintain the whole platform from creating a containerized application to pushing in production.

We’ll walk through the whole workflow, implement several features like linting, technical and functional tests, all together with a deep focus in security.

Agenda

– Introduction of the Workshop

– Description of CI/CD concept and implementation and best practices

– Rootless image building and optimization

– Image signing and secure image pull

– Docker content trust and UserNamespace implementation and best practices

– Image vulnerability scan implementation and best practices

– Integration of build, sign and scan into a CI/CD pipeline

– Automatic Deployment monitoring 

– Tips and advices to go further on 

This workshop will be at least 60% in practice.

– Attendees should have knowledge in running container and building images

– Attendees should bring their own laptop, Rachid will provide cloud infrastructure, but they will need to use their computers to access it