Cyber security
Ubuntu container escape CVE: no patch, public exploit
CVE-2026-80521 enables a container escape to host root via a Linux kernel use-after-free. Ubuntu has no LTS patch 50 days after the upstream fix.
#containers
4 stories tagged containers.
Engineering
Docker container vs virtual machine: what changes
A Docker container vs virtual machine comparison: containers share the host kernel and run isolated processes in megabytes, while VMs virtualize hardware and carry a full OS in gigabytes. The right base image and layer order cut a 2 GB image to under 100 MB.
Engineering
How to shrink a Docker image without breaking it
Reduce Docker image size by choosing slim bases and multi-stage builds. A 2.54 GB image can drop under 200 MB, cutting pull time and storage cost tenfold.
Engineering
How to write a Dockerfile that does not waste your time
To write a Dockerfile that builds fast, order instructions from least to most frequently changing. Copy dependency files before source code so Docker reuses cached layers. Reordering two lines cut rebuild time 81 percent, from 37.4 to 7.1 seconds.