Yasas Banuka
← Home
Field Notes

From the
Trenches

RSS

Deep dives into resilient infrastructure, CI/CD automation, and the engineering decisions that keep production systems alive.

Securing Your Docker Setup (Most People Skip This)
Docker: From Zero to Production · Part 6
DevOps

Securing Your Docker Setup (Most People Skip This)

76% of Docker Hub images have known vulnerabilities. Here's how to close the gaps attackers actually exploit - root containers, leaked secrets, wide-open capabilities, and frozen base images.

11 min readJul 14, 2026
Docker Compose: Reading the File You've Been Copy-Pasting
Docker: From Zero to Production · Part 5
DevOps

Docker Compose: Reading the File You've Been Copy-Pasting

Understand exactly what Docker Compose does under the hood, how depends_on actually works, and the secrets of production-ready yaml setups.

10 min readJun 25, 2026
Docker Networking: How Containers Actually Find Each Other
Docker: From Zero to Production · Part 4
DevOps

Docker Networking: How Containers Actually Find Each Other

You set up a firewall rule to block a port. Docker quietly ignores it. Here's why.

9 min readJun 16, 2026
Images, Layers, and Why Your Builds Are Slow
Docker: From Zero to Production · Part 3
DevOps

Images, Layers, and Why Your Builds Are Slow

One Dockerfile ordering mistake is silently wasting hours of your week. A deep dive into how Docker image layers work, how the build cache thinks, and why multi-stage builds can shrink a 1GB image down to 12MB.

10 min readMay 20, 2026
What's Actually Happening When You Run a Container
Docker: From Zero to Production · Part 2
DevOps

What's Actually Happening When You Run a Container

Spoiler: it's not magic. It's three Linux kernel features that took 11 years to build. A deep dive into namespaces, cgroups, OverlayFS, and the hidden call chain behind 'docker run'.

10 min readMay 17, 2026
Why Docker Exists (And Why VMs Weren't Enough)
Docker: From Zero to Production · Part 1
DevOps

Why Docker Exists (And Why VMs Weren't Enough)

The tool that changed how we ship software - born from a 5-minute talk that got cut off. The story of the 'works on my machine' problem, why VMs couldn't fully solve it, and the kernel-sharing insight that made containers click.

8 min readMay 15, 2026
Deep Dives

Article Series

All Series
Series · 6 of 7 published

Docker: From Zero to Production

Seven articles that take you from 'why does Docker exist' to running a real CI/CD pipeline with multi-arch builds. Each one standalone, but they build on each other — the series most Docker tutorials never write.

86%