Skip to content

sudo-bmitch/presentations

Repository files navigation

Presentations from Brandon Mitchell

These slides are made with RemarkJS or Reveal.js and should be viewable in any browser.

For slides in Reveal.js:

  • You can press "S" to see the speaker notes view.

For slides in RemarkJS:

  • You can press "P" to see presenter notes.
  • For the slides with a live terminal, use "W" and "E" to pause/play the recording.

PDF's have also been included when possible.

Note: if you have cloned the repo locally, and are viewing the presentations by double clicking the html files, some embedded content may not display. There are several possible solutions:

  1. View the content online, everything should be available from the links to GitHub pages.
  2. If you have docker, run local/run-nginx.sh to start a web server on port 5080.
  3. For Firefox, go to about:config and try setting privacy.file_unique_origin to false. See CVE-2019-11730 for more details.

OCI and regclient - Luxembourg 2024

This is an overview of the OCI image and distribution specs, along with a description of the regclient tooling.

Modifying the Immutable: Attaching Artifacts to OCI Images

This is a walk-through and demonstration of the OCI reference type working group result. It shows how artifacts like SBOMs and signatures can be associated with images in an OCI registry.

OCI Layout - Stop Putting Everything in Registries

How to use OCI Layout in CI pipelines to work with images before pushing them. This also covers SBOMs, vulnerability scanning, and image signing, before the image is publicly available.

Secure Supply Chain - 2021

This is an overview of what it takes to build a secure software supply chain, to tooling available, and where development is still in progress. This also covers the value of reproducible builds.

Docker Registry Mirroring - 2021

This is a workshop on setting up your own local registry mirror, including the process to garbage collect stale images.

Docker Intro

Covering containers, images, networks, volumes, security, and building images. These slides are still under development.

Docker Images

Images as they are saved on a registry, covering manifests, configs, and layers.

Regclient

Shows how to use regctl, regsync, and regbot from the regclient projects.

DockerCon 2020 - Docker Registry Mirroring and Caching

How to use registry mirroring and caching to optimize your image registry, reducing time to build and deploy, while also saving bandwidth.

Docker Build

Covering multi-stage, buildkit, buildx, and multi-architecture images from the perspective of a Go user.

DockerCon 2019 - Tips and Tricks From The Docker Captains

BSides NoVA - Containing Security Vulnerabilities with Containers

DockerCon 2018 EU - Tips and Tricks From A Docker Captain

Note, this talk is from DockerCon 2018 EU and is a continuation on the "Tips and Tricks of the Docker Captains" theme that was first started by Captain Adrian Mouat. Check out his talk from DockerCon 2018 in San Francisco.

There was also a webinar given based on the above talk. Slides are almost identical to those above:

DockerCon 2018 - Frequently Asked Queries from StackOverflow

Asciinema

  • I use the player from: https://github.com/asciinema/asciinema-player

  • The following commands are used to build a recording:

    # Install asciinema:
    apt-get install asciinema
    # Setup a window:
    printf '\e[8;26;100t' # set window size to 100x26
    tmux new-session -s preso
    PS1='\n\$ ' # minimal prompt
    # After windows are setup, detach from tmux (Ctrl-B D)
    # Create a recording:
    asciinema rec name.cast -i 3 -c "tmux attach -t preso"
    # Stop the recording by detaching (Ctrl-B D)
    # Tip: Edit the recording to remove the last few milliseconds of the detach
    # Replay the recording:
    asciinema play name.cast

License

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International Public License