{"id":7665,"date":"2021-06-28T02:59:28","date_gmt":"2021-06-28T02:59:28","guid":{"rendered":"https:\/\/linuxways.net\/?p=7665"},"modified":"2021-06-28T02:59:28","modified_gmt":"2021-06-28T02:59:28","slug":"dockerslim-to-minify-optimize-and-secure-docker-container-in-linux","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/centos\/dockerslim-to-minify-optimize-and-secure-docker-container-in-linux\/","title":{"rendered":"DockerSlim to Minify, Optimize, and Secure Docker Container in Linux"},"content":{"rendered":"

Most of the IT professionals who work on Docker get stuck at a point when it’s about the size of the docker containers. Sometimes the size of the docker images goes up to in GB\u2019s which consumes large storage of the system and makes it difficult to upgrade and start the container. Fortunately we have a free Open source tool in Linux\/Mac system which allows us to secure and minimize the size of the docker containers upto 30 times.<\/p>\n

Why use DockerSlim ?<\/p>\n

    \n
  1. To minimize the container\u2019s size which reduces the storage usage.<\/li>\n
  2. To create lightweight containers for faster starting<\/li>\n
  3. Reduce bugs<\/li>\n<\/ol>\n

    In this article, we will cover how to install DockerSlim and use it to minimize the docker container.<\/p>\n

    Installation<\/h2>\n

    Dockerslim is currently supported on Linux and UNIX systems including Mac. The dockerslim binary files can be downloaded from DockerSlim GitHub Repository. <\/strong>Go to the GitHub repository link given below, navigate to installation and download the latest binaries for your system.<\/p>\n

    DockerSlim GitHub Repository: https:\/\/github.com\/docker-slim\/docker-slim<\/a><\/p>\n

    Also, you can use wget command to download the latest DockerSlim binary files as:<\/p>\n

    $ wget https:\/\/downloads.dockerslim.com\/releases\/1.36.1\/dist_linux.tar.gz<\/a><\/pre>\n
    To extract the downloaded files, run the following command.<\/p>\n
    $ tar -zvxf dist_linux.tar.gz<\/pre>\n
    Once the file is extracted, move the binary files to \/usr\/local\/bin directory as:<\/p>\n
    $ sudo mv dist_linux\/* \/usr\/local\/bin<\/pre>\n
    To verify the installation of DockerSlim, run the following command.<\/p>\n
    $ which docker-slim<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    Run the docker docker-slim with option help for useful commands and guides.<\/p>\n
    $ docker-slim help<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    DockerSlim provides a very useful menu-driven command line. To try the available commands, run docker-slim<\/strong> without any arguments . In the DockerSlim shell, type help<\/strong> to get the help menu in the interactive prompt.<\/p>\n
    Output:<\/p>\n
    <\/p>\n
    The basic commands includes the followings:<\/p>\n
    Exit => Exit from DockerSlim shell<\/p>\n
    Xray => Shows what is inside of the container image and reverse engineers its Dockerfile<\/p>\n
    Version = > Show DockerSlim and docker version information<\/p>\n
    Lint => Analyzes container instructions in the Dockerfiles<\/p>\n
    Preparing a container to slim<\/h2>\n
    To create a slim docker container, we need to have a docker image available in the local system. In this article, I have selected an httpd image. You can select the image as per your requirement. Use the following syntax to pull docker images from the dockerhub. Remember that you should have installed the docker engine and dependencies on your system<\/p>\n
    Syntax :<\/p>\n
    $ docker pull <image name><\/pre>\n
    $ docker pull httpd<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    Verifying the Output of the Container<\/h2>\n
    Once the image is pulled, run it as the container and verify the output. In this example, I have exposed port 80 of the httpd docker container and access the default apache page using the browser.<\/p>\n
    $ docker run -d --name apache -p 80:80 httpd<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    Also, to check the size of the docker images run the following command<\/p>\n
    $ docker images<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    Using DockerSlim to build the image<\/h2>\n
    Docker image has been pulled and we have verified the container is working fine. Now we will use DockerSlim to build optimized images. Use the following syntax to create minimized Docker images.<\/p>\n
    $ docker-slim build --target <image name><\/pre>\n
    Example:<\/p>\n
    $ docker-slim build --target httpd<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    The output shows that the size of the docker image has been reduced from 138MB to 8.1 MB which is minimized by 16.3 times from the original image.<\/p>\n
    Verifying the final image<\/h2>\n
    To check the size of the final image, run the following command.<\/p>\n
    $ docker images<\/pre>\n
    Output:<\/p>\n
    <\/p>\n
    Running the container from the DockerSlim build image<\/h2>\n
    Finally, we will create a container from the optimized image and monitor the output. As I have used httpd docker images to minimize, I am going to run an httpd container from the latest image. You can select your images accordingly.<\/p>\n
    Syntax:<\/p>\n
    $ docker run -d --name <name of the container > -p <host port : container port> <image name><\/pre>\n
    Example<\/p>\n
    $ docker run -d --name apache -p 80:80 httpd.slim<\/pre>\n
    Where,<\/p>\n
    httpd.slim is the optimized httpd docker image<\/p>\n
    Output:<\/p>\n
    <\/p>\n
    You can find that the container is up with an optimized image. Lets browse the container in the browser and find the output.<\/p>\n
    <\/p>\n
    You can find that the httpd docker container is working fine with the minimized Docker image.<\/p>\n
    Conclusion<\/h2>\n
    In this article, we have learned about how to install DockerSlim in the Linux system and how it can be used to optimize and secure Docker containers.<\/p>","protected":false},"excerpt":{"rendered":"
    Most of the IT professionals who work on Docker get stuck at a point when it’s about the size of the docker containers. Sometimes the size of the…<\/p>","protected":false},"author":1,"featured_media":7829,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,4,5,83,165,2],"tags":[328,160,35],"class_list":["post-7665","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-debian","category-mint","category-opensuse","category-red-hat","category-ubuntu","tag-container","tag-docker","tag-linux"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/7665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=7665"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/7665\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/7829"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=7665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=7665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=7665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}