Skip to main content
The Changelog

Setting Docker Hardened Images free (Interview)

76 min episode · 3 min read
·
Tushar Jain

Episode

76 min

Read time

3 min

Topics

Productivity, Fundraising & VC, Leadership

AI-Generated Summary

Key Takeaways

  • Hardened Image Architecture: Docker moved from traditional Dockerfiles to a custom YAML syntax for reproducible builds, implementing SALSA level 3 build pipelines with micro VMs, network proxies outside the VM, and credential injection layers. The system produces signed artifacts with complete software bill of materials while maintaining hermetic build environments that prevent tampering during the build process itself.
  • VEX Transparency Model: Docker publishes complete SBOMs allowing any scanner to pull from central CVE feeds, then provides separate VEX statements explaining which vulnerabilities are not exploitable rather than suppressing CVEs in proprietary feeds. This approach enables transparent discussion about security decisions and gives CISOs clear visibility into what vulnerabilities exist and why specific ones do not matter in their context.
  • Production vs Development Images: Docker provides two image flavors - development images include package managers, shells, and debugging tools while production images are minimal. The recommended approach uses multistage builds where development dependencies stay in build stages but production containers run with only essential packages, reducing attack surface while maintaining developer productivity during the build and debug process.
  • Enterprise Revenue Model: Free tier includes all hardened images with SBOM and SALSA attestations, while paid enterprise tier provides SLA commitments on patching timelines, FIPS and STIX compliant images, long-term support beyond standard LTS windows (patching for three plus years), and deeper customization capabilities. This model drives adoption through free access while monetizing compliance requirements that CISOs need.
  • AI Runtime Security: Docker builds a new runtime engine for untrusted AI workloads using micro VMs with network proxies controlling outbound access, credential injection systems that keep secrets outside the agent environment, and file access controls. The system enables running coding agents with dash dash dangerously permissions safely by isolating them from the host machine while maintaining productivity through dynamic runtime controls.

What It Covers

Docker releases Docker Hardened Images as free and open source under Apache 2 license in December 2024, providing over 1,000 minimal, production-ready container images with SBOM, SALSA level 3 build provenance, and cryptographic signing. Tushar Jain explains the technical implementation, business strategy, and future plans for securing the software supply chain.

Key Questions Answered

  • Hardened Image Architecture: Docker moved from traditional Dockerfiles to a custom YAML syntax for reproducible builds, implementing SALSA level 3 build pipelines with micro VMs, network proxies outside the VM, and credential injection layers. The system produces signed artifacts with complete software bill of materials while maintaining hermetic build environments that prevent tampering during the build process itself.
  • VEX Transparency Model: Docker publishes complete SBOMs allowing any scanner to pull from central CVE feeds, then provides separate VEX statements explaining which vulnerabilities are not exploitable rather than suppressing CVEs in proprietary feeds. This approach enables transparent discussion about security decisions and gives CISOs clear visibility into what vulnerabilities exist and why specific ones do not matter in their context.
  • Production vs Development Images: Docker provides two image flavors - development images include package managers, shells, and debugging tools while production images are minimal. The recommended approach uses multistage builds where development dependencies stay in build stages but production containers run with only essential packages, reducing attack surface while maintaining developer productivity during the build and debug process.
  • Enterprise Revenue Model: Free tier includes all hardened images with SBOM and SALSA attestations, while paid enterprise tier provides SLA commitments on patching timelines, FIPS and STIX compliant images, long-term support beyond standard LTS windows (patching for three plus years), and deeper customization capabilities. This model drives adoption through free access while monetizing compliance requirements that CISOs need.
  • AI Runtime Security: Docker builds a new runtime engine for untrusted AI workloads using micro VMs with network proxies controlling outbound access, credential injection systems that keep secrets outside the agent environment, and file access controls. The system enables running coding agents with dash dash dangerously permissions safely by isolating them from the host machine while maintaining productivity through dynamic runtime controls.
  • Supply Chain Attack Prevention: Supply chain attacks caused sixty billion dollars in damages in 2024, triple the 2021 amount. Docker addresses this by patching CVEs faster than upstream maintainers, removing bloated packages that exist only for usability, and providing hardened system packages built from source. The approach shifts security burden from individual engineering teams to Docker's centralized patching infrastructure.

Notable Moment

Tushar revealed Docker's timeline from concept to launch took just eight months - from February 2024 initial planning to May customer GA to December free release. The decision to make it free came in early November with only a four week sprint to launch, demonstrating rapid execution. He emphasized this speed is now baseline, noting AI development requires shrinking these timelines by another 10x.

Know someone who'd find this useful?

Episode Transcript

Welcome, everyone. I'm Jared, and you are listening to the change log, where each week we interview the hackers, the leaders, and the innovators of the software world. In May 2025, Docker launched hardened images, a secure, minimal, production ready set of images. And in December, they made DHI freely available and open source to everyone who builds software. On this episode, we are joined by Tushar Jain, EVP of engineering at Docker, to learn all about it. But first, a big thank you to our partners at flyta.io, the platform for devs who just wanna ship, build fast, run any code fearlessly at fly.io. Okay. Docker harden images for all on the change log. Let's do it. This is the year we almost break the database. Let me explain. Where do agents actually store their stuff? They've got vectors, relational data, conversational history, embeddings, and they're hammering the database at speeds that humans just never have done before. And most teams are duct taping together a Postgres instance, a vector database, maybe Elasticsearch for search. It's a mess. Well, our friends at Tiger Data looked at this and said, what if the database just understood agents? That's agentic Postgres. It's Postgres built specifically for AI agents, and it combines three things that usually require three separate systems. Native model context protocol servers, MCP, hybrid search, and zero copy forks. The MCP integration is the clever bit your agents can actually talk directly to the database. They can query data, introspect schemas, execute SQL without you writing fragile glue code. The database essentially becomes a tool your agent can wield safely. Then there's hybrid search. Tagger data merges vector similarity search with good old keyword search into a SQL query. No separate vector database, no elastic search cluster, semantic and keyword search in one transaction. One engine. Okay. My favorite feature, the forks. Agents can spawn sub second zero copy database clones for isolated testing. This is not a database they can destroy. It's a fork. It's a copy off of your main production database if you so choose. We're talking a one terabyte database forked in under one second. Your agent can run destructive experiments in a sandbox without touching production, and you only pay for the data that actually changes. That's how Copy On Right works. All your agent data, vectors, relational tables, time series metrics, conversational history lives in one queryable engine. It's the elegant simplification that makes you wonder why we've been doing it the hard way for so long. So if you're building with AI agents and you're tired of managing a zoo of data systems, check out our friends at Tiger Data at tigerdata.com. They've got a free trial and a CLI with an MCP server you can download to start experimenting right now. Again, tigerdata.com. So first, we have supply chain attacks caused $60,000,000,000 in damages in 2025. Triple what they caused in 2021. Every language, every ecosystem, every build stuff, they're a …

Get the full transcript (14,897 words) + summary by email — free

One-time email with the complete transcript and AI summary of this episode. No account needed.

One email, no spam. We’ll also show you what SignalCast does.

Browse all The Changelog transcripts →

You just read a 3-minute summary of a 73-minute episode.

Get The Changelog summarized like this every Monday — plus up to 2 more podcasts, free.

Pick Your Podcasts — Free

Keep Reading

Books, tools, and gear mentioned in this episode

SignalCast may earn commission on purchases via these links. As an Amazon Associate, SignalCast earns from qualifying purchases.

Tools

  • by NordLayer

    Sponsors section lists NordLayer as a sponsor of the episode.
  • by Fly.io

    Sponsors section lists Fly.io as a sponsor of the episode.
  • by TigerData

    Sponsors section lists TigerData as a sponsor of the episode.
  • by Namespace

    Sponsors section lists Namespace as a sponsor of the episode.

Products

  • by Docker

    Docker releases Docker Hardened Images as free and open source under Apache 2 license in December 2024, providing over 1,000 minimal, production-ready container images with SBOM, SALSA level 3 build provenance, and cryptographic signing.

More from The Changelog

We summarize every new episode. Want them in your inbox?

Similar Episodes

Related episodes from other podcasts

Explore Related Topics

This podcast is featured in Best Cybersecurity Podcasts (2026) — ranked and reviewed with AI summaries.

You're clearly into The Changelog.

Every Monday, we deliver AI summaries of the latest episodes from The Changelog and 192+ other podcasts. Free for one show.

Start My Monday Digest

No credit card · Unsubscribe anytime