Containers

Docker Hardened Images — Migrate Your Homelab Stack to Near-Zero CVEs

Swap your standard Docker Hub images for Docker Hardened Images (DHI) to cut CVEs by up to 95%. Step-by-step Compose migration for Postgres, Redis, Nginx, and your full homelab stack.

Portainer Docker Deployment — Homelab Container Management Guide

Deploy Portainer with Docker Compose for visual container management across your homelab. Covers CE vs Business Edition, multi-host agent setup, stack deployment, security hardening, and backup strategies.

Docker CVE-2026-31431 — Mitigate the Copy Fail Vulnerability

A practical guide to understanding and mitigating CVE-2026-31431 ‘Copy Fail’ in Docker environments. Covers kernel patching, seccomp profile hardening, AppArmor rules, and verification steps for homelab operators.

Docker Healthchecks — Service Readiness and Dependencies in Compose

A practical guide to Docker healthchecks in Compose — define checks with test, interval, timeout, and start_period, use depends_on condition: service_healthy for ordered startup, and debug health state with docker inspect.

Docker Trivy Scanning — Automated Vulnerability Detection for Homelab Containers

A practical guide to running automated vulnerability scanning for Docker containers in your homelab — install Trivy, scan images for CVEs and secrets, set up systemd timers for weekly scans, and integrate with dashboards for actionable security reports.

Docker Compose Environment Variables — .env, Substitution, and Secrets

Master Docker Compose environment variables — understand .env file scoping, variable substitution syntax with defaults and errors, env_file vs environment blocks, and when to use Docker secrets over env vars for sensitive data in homelab deployments.

Docker GPU Acceleration — NVIDIA Container Toolkit for Homelab

Set up GPU acceleration in Docker containers with the NVIDIA Container Toolkit — from installation to real workloads like Ollama AI inference, Jellyfin hardware transcoding, and Frigate object detection.

MikroTik Containers — Run Docker Images on RouterOS

Run Docker containers directly on MikroTik RouterOS 7 — enable container mode, configure veth bridges, pull images from Docker Hub, and deploy Pi-hole or AdGuard Home without extra hardware.

Prometheus Grafana Monitoring Stack — Docker Compose Setup

Deploy a production-grade Prometheus Grafana monitoring stack with Docker Compose — including Node Exporter, cAdvisor, and Alertmanager for complete homelab observability.

Docker IPv6 Networking — Enable Dual-Stack in Your Homelab

Complete guide to enabling IPv6 in Docker — from daemon configuration and address pools to Compose networks, Traefik reverse proxy, and IPv6 firewall rules for your homelab.