https://ownchain.systems/tags/docker/ Recent content in Docker on Ownchain Systems Hugo en-us Sun, 30 Aug 2026 00:00:00 +0000 https://ownchain.systems/codex/001-socket-hardening/ Sun, 30 Aug 2026 00:00:00 +0000 https://ownchain.systems/codex/001-socket-hardening/ <p><strong>Classification:</strong> Ingress Hardening &amp; Attack Surface Reduction<br> <strong>Status:</strong> Implemented &amp; Verified</p> <hr> <h2 id="executive-summary">Executive Summary</h2> <p>This report documents the architectural lifecycle of container management on Bastion: from initially deploying a web-based GUI (Portainer) to overcome early CLI friction, to identifying the inherent security risks of host-socket mounting, and finally decommissioning the interface in favor of key-authenticated, terminal-native tooling (<code>lazydocker</code>).</p> <hr> <h2 id="phase-1-initial-deployment--context">Phase 1: Initial Deployment &amp; Context</h2> <h3 id="why-portainer-was-introduced">Why Portainer Was Introduced</h3> <p>When initially transitioning to Docker and container orchestration, early CLI management presented significant friction. Debugging multi-container networks, diagnosing container start failures, and managing persistent volume paths purely through raw shell commands often led to silent errors and operational overhead.</p> https://ownchain.systems/codex/003-container-lifecycle/ Sun, 30 Aug 2026 00:00:00 +0000 https://ownchain.systems/codex/003-container-lifecycle/ <p><strong>Classification:</strong> Operational Lifecycle &amp; Database Resilience<br> <strong>Status:</strong> Implemented &amp; Verified</p> <hr> <h2 id="executive-summary">Executive Summary</h2> <p>This report documents the failure modes, triage, and safe maintenance patterns discovered while updating multi-container microservice stacks with tightly coupled database dependencies. It analyzes race conditions during parallel image layer pulls, container recreations vs. image caching, and ensuring zero data loss during automated backend schema migrations.</p> <hr> <h2 id="the-problem-statement--failure-modes">The Problem Statement &amp; Failure Modes</h2> <p>Updating production-grade container stacks (such as Firefly III, its importer, cron sidecar, and MariaDB/MySQL backend) presents subtle operational risks if treated like simple stateless containers:</p>