Proud to see Docker Captains Rachid Zarouali, Pawel Piwosz, and Steve Hartland represent the community at Container Days London. From Cluster API at scale to Kubernetes multi-tenancy and real talk on data sovereignty - strong ecosystems are built on shared knowledge.

Running local LLMs and hitting context limits? The latest Docker AI Newsletter shows how context packing lets you fit longer chats into small models - without slowing down. Learn how it works, when to use it, & how to implement it using Docker Model Runner & Agentic Compose: https://bit.ly/4trhFT8

Changelog just dropped a new episode with guest Tushar Jain, Docker’s EVP of Engineering. Tough questions devs actually care about: why hardened images are now free + open source, how they work, & what’s next for container security & AI infra. Tushar doesn’t hold back. https://bit.ly/4qvQaFv

Most security issues don’t come from your code - they come from what’s underneath it. The latest Docker Navigator newsletter explores how teams are locking down the foundations: sandboxed AI agents, secure-by-default containers, and fewer surprises at runtime. Read now: https://bit.ly/4tzy7AL

What happens when you ask a coding agent to break out of its sandbox? On Hanselminutes, Scott Hanselman puts Docker Sandboxes to the test with Docker COO Mark Cavage. MicroVM isolation, agent autonomy, MCP - and a real escape attempt 🔥 Watch → www.youtube.com/watch?v=sQh-...

Not sure where to start with MCP? This session covers practical MCP patterns: quick experiments, declarative multi-agent apps, and full agent frameworks - plus guidance on when to use each. Register → https://bit.ly/4cnafu1

Most container security issues start with base images. This Buchatech post explains how Docker Hardened Images shift that work to the foundation, what teams get out of the box, and how hardened bases help reduce day-to-day maintenance and CVE noise. Read more → https://bit.ly/46GcXHi

What does container security look like in the real world- not in theory? Now that Docker Hardened Images are available to everyone, Docker CISO Mark Lechner breaks down how to use them well: clear responsibility boundaries, supply chain isolation beyond CVEs, VEX & next steps: https://bit.ly/4anx9yV

Great news for teams using GitHub Copilot CLI: Docker Sandboxes now supports it. Developers can run coding agents more freely, backed by strong isolation and safe execution environments. Learn more → https://bit.ly/4rjmRH6

Long-running systems shouldn’t require constant rework to stay secure. This is why, when services run for years, it’s essential that security be built into the foundation, not bolted on later Temporal CTO Maxim Fateev on how free Docker Hardened Images & Extended Lifecycle Support make that possible

Wiz now ingests OpenVEX data from Docker Hardened Images, adding real exploitability context to container vulnerability findings. Combined with DHI’s minimal, secure-by-default images & high-quality SBOMs, this means fewer false positives & clearer security signals: https://bit.ly/3Mxpl5J

Hardened images in prod? Just looking at CVE counts isn’t enough. Learn how Docker Hardened Images let you patch, customize, and verify images at scale - without breaking builds. 🗓 Feb 19, 11am ET → https://bit.ly/4aiPq0e

Ever had a coding agent install a package or tweak configs & break your local setup? We’ve all been there. Docker Sandboxes run Claude Code, Gemini CLI, Codex, etc in isolated microVMs. Agents can run unattended w/o risking your host. Reset in seconds if anything goes wrong: https://bit.ly/4teSVgL

As teams move from evaluating Docker Hardened Images to running real workloads, the critical question is how to build on top of them. This last post in our series on getting the most out of your DHI trial explains how to customize images while preserving the security benefits: https://bit.ly/4qXIFIg

Agents run at machine speed. Human approvals don’t. Legacy governance can’t keep up. The fix: Contain, Curate, Control: a new framework for AI agent security → https://bit.ly/4r0PWHj

Making security defaults open source isn’t a small move. Docker EVP of Engineering Tushar Jain joins @changelog.com to unpack the tradeoffs, the technical reality behind hardened images, and what the next wave of container + AI infra really looks like.

MCP servers are cool. Secure, and easy setup is cooler. This walkthrough shows how Docker MCP Toolkit simplifies MCP configuration with containers + built-in OAuth. Highly recommend if you want to focus on building, not managing configs. https://youtu.be/N__ZvBAw6io

Want to see what a developer-first partnership looks like? Docker & J.P. Morgan Payments show what’s possible when teams work together to support developers at scale - with self-serve workflows, secure containers & modern APIs. Explore the story & take notes for your team → https://bit.ly/4rxIQdi

🎙️ Ship Happens episode 1 is live! Per Krogslund talks with E2B founder Vasek Mlejnsky about building AI agent infrastructure - from secure sandboxes and open-source trust to growing a startup from Prague to San Francisco. Listen now → https://youtu.be/TBHOOeuMfl4

The Atlassian Rovo MCP server is now available in Docker’s MCP Catalog and Toolkit. Cecilia Liu, Product Lead for Docker’s MCP solutions, shows how easy it is to connect AI assistants to Jira with a few clicks, built-in OAuth, and your favorite agent creating Jira epics. https://bit.ly/4absWht

Curious what Docker Hardened Images look like in practice? This walkthrough shows how to pull DHI images, use them in builds, and scan them with Docker Scout + Trivy so you can see and verify what you’re getting out of the box. https://bit.ly/4rBvEUV

Running LLMs locally is becoming the practical choice for teams that care about cost, latency & data control. Join Docker Captain Rami Krispin for a hands-on session about Docker Model Runner and learn how to run local models from Docker Hub and Hugging Face. Feb 15 @ 10am ET https://bit.ly/4qdTo0c

For devs asking “how do I run coding agents without breaking my machine?” Docker Sandboxes are now available. They use isolated microVMs so agents can install packages, run Docker, and modify configs - without touching your host system. Read more → https://bit.ly/49QJBH6

Secure-by-default should actually BE the default. If you’re pulling images and installing dependencies, protection should already be there. That’s why it’s great to see Socket CEO Feross Aboukhadijeh call out how free Docker Hardened Images embed the Socket firewall by default.

Want a clear, fast overview of Docker Hardened Images? This ItsFOSS post breaks down what DHI offers and how the free, enterprise, and extended support options differ - focusing on the key takeaways that actually matter for developers and platform teams. Read more → https://bit.ly/4qRIqP6

MCP servers are powerful - but managing runtimes, secrets, and N×N client wiring becomes a bottleneck fast. This edition of the Docker AI Labs Newsletter shows how to move from simple MCP tools to multi-agent systems. Read more → https://bit.ly/3M3gecP

New with Docker MCP Catalog and Toolkit Discover tools with mcp-find, load them on demand with mcp-add, compose tools using JavaScript, and run everything with secure sandboxing and agent-driven OAuth. Learn more → https://bit.ly/47IXkyu

To get the most out of Docker Hardened Images, it helps to understand what’s inside & how they’re built. Part 2 in this 3-part series focused on exactly that. This shows how to independently verify DHI by checking signatures, build provenance, compliance evidence, & SBOMs: https://bit.ly/49XijPq

Claude Code doesn’t have to run in the cloud - or cost you anything. This technical walkthrough shows how to use Docker Model Runner and open models to set up a private AI coding environment with agentic workflows, repo awareness, and terminal-native UX: https://bit.ly/4bHFrEf

“Docker is…” “Powerful” “Community” "...A portable superpower" We asked our Docker Captains what Docker really means to them, and their answers hit hard. What’s YOUR definition of Docker?

Moving to ARM64? Make it painless. Use Docker MCP Toolkit + Arm MCP server + VS Code + Copilot to scan, refactor, and PR your changes in minutes, not hours! Guide + commands: https://bit.ly/49Y2GqZ

Want a personal AI assistant without sending your data to someone else’s cloud? This guide shows how to run Clawdbot with Docker Model Runner for private inference, predictable costs, and full control. Read more → https://bit.ly/3Z0sb60

Secure foundations shouldn’t come at the cost of speed. The goal: fewer surprises, less toil & a foundation teams don’t have to think about daily. We love seeing this in practice, as Anaconda CEO David DeSanto explains how free Docker Hardened Images help teams move faster while managing risk

Your RAG pipeline works… until it shows a user data they shouldn’t see. Learn how to enforce permissions, safely post-filter RAG results, and test the whole flow end-to-end with Testcontainers, while using SpiceDB, the same system OpenAI uses to secure 37B docs for 5M users: https://bit.ly/3ZwdyaB

Still debugging with print statements like it’s 2013? Buildx Debugger lets you step inside your Dockerfile build to see exactly what’s happening - and what’s breaking. Stop guessing. Start debugging: https://youtu.be/aZLoEFqiIzA

Running Docker Hub pulls at scale? This post shows how to add a Sonatype-protected proxy to centralize policy checks, cache trusted images, and keep existing workflows intact. Learn how → https://bit.ly/4jQBm2g

FIPS compliance breaks the illusion that your base image controls crypto. Prebuilt native dependencies can bypass your FIPS module entirely - and you won’t notice until the wrong code path runs in production. A real failure, why it happened, and how to fix it before rollout: https://bit.ly/4r7R8se

Docker Hardened Images are now free - but what does that actually mean for your projects? This blog from William Ogou covers what’s included, how it compares to the enterprise tier, and how to get started (with a handy FAQ at the end). 🔗 https://bit.ly/4pNnhnT

What does “hardened” really mean for Docker images? Docker Captain Sagar Utekar joined Hrittik Roy to break down: • What hardened images actually are • Common mistakes teams make • Real-world security tips you can use today Watch here: https://bit.ly/4a46eZP

Open source is foundational to modern development - and it should be secure by default. MongoDB CTO Jim Scharf explains why free Docker Hardened Images support open, trusted foundations teams can build on with confidence:

Ship Happens - a new podcast from Docker! Shipping at scale is messy- production scars, security theater, AI hype vs. reality. Host Per Krogslund turns that mess into real lessons from engineers who’ve been there. Ep 1 drops next Tues, w/ guest Vasek Mlejnsky (E2B) Subscribe: https://bit.ly/4qw8uz1

AI coding assistants don’t have to send your code to the cloud. This guide walks through how to pair OpenCode with Docker Model Runner to run models locally, keep code private, and avoid per-token costs: https://bit.ly/4rlW3Gb

The conversation around Docker Hardened Images is moving beyond announcements. This C# Corner post takes a closer analysis of how DHI compares - and what secure-by-default looks like in practice. https://bit.ly/3ZkuBMM

Did you miss the ep where Docker devs talked about agents going rogue? Yeah, it happened. Oleg Šelajev + Kevin Wittek broke down: - microVM sandboxes - secret injection - YOLO mode for coding agents Catch up here → https://youtu.be/tdmqL3mEneo

The best part of launching Docker Hardened Images for free? Watching the community run with it. We collected & wanted to share a few of our favorite dev reactions. We love our community & hearing your thoughts! (And if you share your take on any of our DHI posts, maybe we’ll feature yours next!)

Open source adoption is rising, but CVEs are rising even faster. Teams end up chasing alerts instead of fixing risk at the source, especially as AI/agents pull in dependencies autonomously. This on-demand webinar shows how to reduce that risk with Docker Hardened Images (DHI): https://bit.ly/3NxBwj0

You don’t need a giant model to get real coding help, small LLMs can rise to the challenge. This post shows how to use RAG to feed just the right code snippets to very small models, turning them into truly helpful coding assistants w/ Docker Model Runner, LangChain, & Nova: https://bit.ly/4pBnR7T

Just dropped- January’s Docker Navigator Newsletter This issue looks at how teams can build & ship more securely by default: what free Docker Hardened Images means in practice, reducing supply chain risk, & supporting real-world AI & agent workflows without slowing down dev: https://bit.ly/3LHWmvD

Debugging shouldn’t feel like playing 4D chess with a stack trace. Dockerfile debugging support is here to help you actually see what’s going on inside a running build and learn how to fix faster. Watch our new walkthrough: https://youtu.be/aZLoEFqiIzA

When leaders at Google call it a win for the developer community, we know we’re on the right path. Ryan Salva on why free Docker Hardened Images matter for secure-by-default development: