Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Most tutorials miss these Basic and important concepts about Dockerization.

Recently, I began learning Docker from scratch. I found that most tutorials only explain how to set up everything in a single container since it’s simpler, but they rarely teach you how to set up a standalone container. This tutorial will c…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Recently, I began learning Docker from scratch. I found that most tutorials only explain how to set up everything in a single container since it’s simpler, but they rarely teach you how to set up a standalone container. This tutorial will cover those missing details.



It took me a few hours to create my own container, but for standalone containers, I watched a bunch of tutorials, but nothing was useful. Now, let’s talk about what most tutorials miss about the Docker container.






Dockerfile is only required when you want to use a custom image



This thing 99% tutorial doesn’t teach you that the Docker container only needs a Dockerfile when you want to use your custom image, the custom image would be your NextJS and Django project, only if you want to run the project inside the Docker container.



In that case, you need the Dockerfile since you need to install all the dependencies to run the NextJS and Django project. Also, you need to add some custom commands so that the project will automatically start your Docker container.






Running Standalone Image



To run a standalone image inside the Docker containers, you don’t need a Dockerfile. If the container image is already available in the Docker Hub, you can just copy the image's name from Docker Hub, and it will pull the image from Docker Hub when you run the build command.



To access the Docker container outside the container, you need to create a shared network so that the Docker container can communicate from outside the project.






How to Create a Shared Network for External Projects



To set up a shared network, add the network definition inside the Docker services section.




    networks:
- shared-infra






After that, you need to run this command in the terminal,




docker newtwork create shared-infra






which will create a shared network so that the outside network can communicate with the Docker container.



Just take an example, your Postgres database running inside the Docker container, and you want to connect with your NextJS, which is not inside the Docker container, then you have to follow what I have shared.



Also, you need to define the network external: true in the bottom, otherwise you will get an error when you run the docker compose up command.




networks:
shared-infra:
external: true










Create a shared Network between containers.



Let’s suppose you created a standalone container, then you want to utilise it in the other container, just mention this thing in the service.




networks:
- ecommerce_network






Also, you need to define the network as a bridge. so that they can communicate with each other.



networks:

ecommerce_network:

driver: bridge



In this case, you don’t need an external true since we need a shared network within the container. Also, you don’t need to run any command in the terminal.





Postgres doesn’t require a Dockerfile



If you want to set up the Postgres database inside the Docker container, then you don’t need a Dockerfile since the image is already available on Docker Hub. You can just copy the image's name. Which version would you like to use? I would recommend using Postgres 17 since it’s stable. Still, if you want to set up the Postgres database 17 without the Docker container, then Here is the Source.



But I would not recommend using the Postgres database inside the Docker container for production since it is hard to manage, and only good for development. Postgres on Docker containers only makes sense when you need a development environment in your virtual private server for testing.



If you wanted to see how it is so easy to migrate and dump the PostgreSQL database without a Docker Container, then Here is the Source.





You can Create Multiple Docker Compose files



This thing most tutorials don’t tell you about, you can create multiple docker compose wether one for production and a second for the development environments, but when you run Docker, you need to mention the name, let’s take an example.



Let’s suppose I have this Docker docker-compose.yml for the production environment, then I need to mention the file name when running the docker up command.




docker compose -f docker-compose.yml up -d






And for the development environment, I need to use docker-compose.dev.yml




docker compose -f docker-compose.dev.yml up -d 






These are all the important concepts that people rarely talk about, and if you want to see how you can create a shared network in a Docker container and get a completely beginner-friendly guide, then Here is the Source.



And that’s pretty much it for this tutorial. I will see you in the next one.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Most tutorials miss these Basic and important concepts about Dockerization.
id: 557a0d82-fc09-4bee-b32a-289271c438e9
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Most tutorials miss these Basi" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Most tutorials miss these Basic and impo")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Most tutorials miss these Basic and impo*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Most tutorials miss these Basic and impo"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Most tutorials miss these Basic and impo.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Most tutorials miss these Basic and important concepts about Dockerization.

Thematisch verwandte Begriffe: Most, tutorials, miss, these · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97735 | ITFlow before 26.08 allows SVG attachments in the ticket email parser (c…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag