Docker Engine 29.8.0: --umask Flag, Custom AppArmor Profiles, and CloudWatch Entity Logging Docker Engine 29.8.0 shipped on September 3, 2026, and it's a release worth actually reading the changelog for instead of skimming past. It doesn't add a headline feature — it closes four small, specific gaps that practitioners …

Docker CopyEscape (CVE-2026-17106): Fix the docker cp Host File Overwrite Vulnerability If you or your CI pipeline ever run docker cp against a container you didn't fully trust — a scanning sidecar, a customer-submitted build, an AI-agent sandbox — you need to check your Docker version right now. CVE-2026-17106, …

Docker VMM Public Beta: What Docker's First-Party Virtualization Engine Changes On August 12, 2026, Docker shipped the public beta of Docker VMM — a virtualization layer it built and now owns end to end, replacing the third-party engines Docker Desktop has relied on since it first needed a Linux VM on Mac and Windows. …

Docker Hub OIDC for GitHub Actions: Retire Your Stored Access Tokens If your CI pipeline pushes images to Docker Hub, there's a good chance a Personal Access Token (PAT) or Organization Access Token (OAT) is sitting in your GitHub repository secrets right now — valid for months, scoped broader than you'd like, and one …

If you're working with containers and Kubernetes, you've probably heard about Docker and containerd. In older blogs and documentation, Docker is often mentioned alongside Kubernetes. However, in newer content, you'll see containerd. So, what's the difference? And what tools should you be using? Let's dive into the …

Docker is an essential tool for modern developers, allowing them to create, deploy, and run applications in containers. Containers are lightweight, portable, and ensure consistency across multiple environments. In this guide, we’ll break down Docker commands into easy-to-understand categories, helping you navigate …