DevOps and Docker Talk: Cloud Native Interviews and Tooling

Docker AI, what’s new with MCP, Agents, Sandboxes, and more

Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks. Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w [https://youtu.be/dTF3b36Bq6w] 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild [https://www.bretfisher.com/theguild] 🍾 ★Show Links★ * Docker Hardened Images for Every Developer [https://www.docker.com/blog/docker-hardened-images-for-every-developer] * Docker Hardened System Packages [https://www.docker.com/blog/announcing-docker-hardened-system-packages] * Hardened Images Catalog [https://hub.docker.com/hardened-images/catalog] * Gordon AI Just Got an Update [https://www.docker.com/blog/gordon-dockers-ai-agent-just-got-an-update] * Docker Sandboxes [https://www.docker.com/products/docker-sandboxes] * NanoClaw and Docker Sandboxes [https://nanoclaw.dev/blog/nanoclaw-docker-sandboxes] * Docker Model Runner VLLM Metal on macOS [https://www.docker.com/blog/docker-model-runner-vllm-metal-macos] * OpenWebUI + Docker Model Runner [https://www.docker.com/blog/openwebui-docker-model-runner] * MCP Catalog and Toolkit [https://docs.docker.com/ai/mcp-catalog-and-toolkit/catalog/#custom-catalogs] * Dynamic MCP [https://docs.docker.com/ai/mcp-catalog-and-toolkit/dynamic-mcp] * Cagent Action [https://github.com/docker/cagent-action] * PR Review Workflow of Cagent [https://github.com/docker/docs/blob/main/.github/workflows/pr-review.yml] * Nightly Docs Scan Workflow [https://github.com/docker/docs/blob/main/.github/workflows/nightly-docs-scan.yml] Creators & Guests * Cristi Cotovan [https://podcast.bretfisher.com/people/cristi-cotovan] - Editor * Bret Fisher [https://podcast.bretfisher.com/people/bret-fisher] - Host * Beth Fisher [https://podcast.bretfisher.com/people/beth-fisher] - Producer * Michael Irwin 🇺🇦 🕊 [https://podcast.bretfisher.com/people/michael-irwin] - Guest You can also support this podcast by subscribing to my YouTube [https://www.youtube.com/@BretFisher] channel and my weekly newsletter at bret.news [https://bret.news/]! Grab the best coupons for my Docker and Kubernetes courses [https://www.bretfisher.com/courses]. Join my cloud native DevOps community on Discord [https://devops.fan/]. Grab some merch at Bret's Loot Box [https://bretfisher.myspreadshop.com/] Homepage bretfisher.com [https://bretfisher.com/] * (00:00) - Introduction * (11:15) - Docker Hardened Images * (25:19) - Gordon AI * (35:40) - Docker Sandboxes * (39:55) - Sandbox Demo & Network Security * (57:27) - Model Runner, OpenWebUI & MCP Tools * (01:08:48) - Cagent, Open Source & The Future of AI in DevOps

Backup S3, Google Drive, iCloud, Notion with Plakar

Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration. Check out the video podcast version here: https://youtu.be/OPRK5osKQHI [https://youtu.be/OPRK5osKQHI] 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild [https://www.bretfisher.com/theguild] 🍾 ★Show Links★ * Plakar website [https://plakar.io] * Plakar Github Repo [https://github.com/PlakarKorp/plakar] * Plakar demo [https://demo.plakar.io] * Plakar on X [https://x.com/PlakarKorp] Creators & Guests * Cristi Cotovan [https://podcast.bretfisher.com/people/cristi-cotovan] - Editor * Bret Fisher [https://podcast.bretfisher.com/people/bret-fisher] - Host * Beth Fisher [https://podcast.bretfisher.com/people/beth-fisher] - Producer * Julien Mangeard [https://podcast.bretfisher.com/people/julien-mangeard] - Guest * Gilles Chehade [https://podcast.bretfisher.com/people/gilles-chehade] - Guest You can also support this podcast by subscribing to my YouTube [https://www.youtube.com/@BretFisher] channel and my weekly newsletter at bret.news [https://bret.news/]! Grab the best coupons for my Docker and Kubernetes courses [https://www.bretfisher.com/courses]. Join my cloud native DevOps community on Discord [https://devops.fan/]. Grab some merch at Bret's Loot Box [https://bretfisher.myspreadshop.com/] Homepage bretfisher.com [https://bretfisher.com/] * (00:00) - Introduction * (02:25) - Backup Engineering * (07:07) - Restore First Mindset * (09:13) - Plakar's Elevator Pitch * (20:41) - Docker and Volume Backups * (26:27) - Docker Image Deployment Challenges * (29:10) - Backing Up the System * (30:13) - Encryption and Architecture Modes * (34:14) - Enterprise Scaling and Solo DevOps * (36:05) - Ransomware And Encryption * (36:44) - Source Side Dedup Demo * (39:34) - Chainless Snapshots * (41:24) - Sync And Multi Store Copies * (43:56) - Crypto Audits And Repair * (46:05) - Backup Stress Horror Stories * (50:07) - Make Backups Usable * (52:17) - Ransomware Detection Heuristics * (58:23) - Cloud Native Positioning * (01:02:13) - Kubernetes and Integrations

Your Images are Out of Date (probably) - The Silent Rebuilds problem

Container base images (like Official Docker Hub images) are often updated without new tag versions. I call this Silent Rebuilds. There's no way to know this happens without image digest-checking automation like Dependabot and Renovate with specific settings. Failure to keep up-to-date is a prime source of vulnerabilities that can lead to serious security breaches. Automate the updates! Check out the video podcast version here: https://youtu.be/z_ahbsSc4Fo [https://youtu.be/z_ahbsSc4Fo] 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild [https://www.bretfisher.com/theguild] 🍾 ★Show Links★ * Course waitlist: GitHub Actions Pro [https://www.bretfisher.com/waitlist] * https://www.bretfisher.com/blog/silent-rebuilds [https://www.bretfisher.com/blog/silent-rebuilds] * https://github.com/BretFisher/silent-rebuilds [https://github.com/BretFisher/silent-rebuilds] * https://www.bretfisher.com/chainguard-event [https://www.bretfisher.com/chainguard-event] Creators & Guests * Cristi Cotovan [https://podcast.bretfisher.com/people/cristi-cotovan] - Editor * Bret Fisher [https://podcast.bretfisher.com/people/bret-fisher] - Host * Beth Fisher [https://podcast.bretfisher.com/people/beth-fisher] - Producer * Nirmal Mehta [https://podcast.bretfisher.com/people/nirmal-mehta] - Host You can also support this podcast by subscribing to my YouTube [https://www.youtube.com/@BretFisher] channel and my weekly newsletter at bret.news [https://bret.news/]! Grab the best coupons for my Docker and Kubernetes courses [https://www.bretfisher.com/courses]. Join my cloud native DevOps community on Discord [https://devops.fan/]. Grab some merch at Bret's Loot Box [https://bretfisher.myspreadshop.com/] Homepage bretfisher.com [https://bretfisher.com/] * (00:00) - Intro * (05:30) - Docker Security and Image Builds * (10:13) - CVEs in Containers * (11:39) - Where we were * (15:26) - Silent Builds and Mutable Tags * (18:44) - Docker Official Image Tags Are Rebuilt Often * (21:14) - Chainguard's Tool * (21:34) - Tag Tracker Tool Overview * (26:13) - High Fivers DevOps Group * (28:16) - Problem of Silent Rebuilds * (36:33) - Post-Stream Updates

AI Wins and Misses for 2025

I'm joined by Nirmal Mehta of AWS and Viktor Farcic from Upbound, to go through our 2025 year in review. We look into the AI tools that consumed us this year, from CLI agents to terminal emulators, IDEs, AI browsers - what worked, what flopped, what's worth your time and money, and what we think isn't! Check out the video podcast version here: https://youtu.be/mnagfUsh5bc [https://youtu.be/mnagfUsh5bc] 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild [https://www.bretfisher.com/theguild] 🍾 Creators & Guests * Cristi Cotovan [https://podcast.bretfisher.com/people/cristi-cotovan] - Editor * Bret Fisher [https://podcast.bretfisher.com/people/bret-fisher] - Host * Beth Fisher [https://podcast.bretfisher.com/people/beth-fisher] - Producer * Nirmal Mehta [https://podcast.bretfisher.com/people/nirmal-mehta] - Host * Viktor Farcic [https://podcast.bretfisher.com/people/viktor-farcic] - Guest You can also support this podcast by subscribing to my YouTube [https://www.youtube.com/@BretFisher] channel and my weekly newsletter at bret.news [https://bret.news/]! Grab the best coupons for my Docker and Kubernetes courses [https://www.bretfisher.com/courses]. Join my cloud native DevOps community on Discord [https://devops.fan/]. Grab some merch at Bret's Loot Box [https://bretfisher.myspreadshop.com/] Homepage bretfisher.com [https://bretfisher.com/] * (00:00) - Introduction * (04:15) - Game of AI Tools * (04:41) - Reflecting on the Fast-Paced Year * (07:52) - CLI Tools and AI Integration * (09:30) - Ghostty * (12:29) - Terminal Preferences and AI Tools * (14:33) - Claude Code * (16:54) - Skills * (28:01) - Warp * (35:22) - AWS Kiro and Spec-Driven Development * (41:41) - Visual Editors (IDEs) * (47:02) - Zed * (49:12) - AI Browsers * (01:02:53) - Notion AI * (01:05:11) - Code Rabbit MCP * (01:07:50) - AI Optimization * (01:10:42) - Ad Blocking and AI SEO

Find Your K8s Happy Path with RawKode Academy

I talk with David Flanagan, aka Rawkode, about his new opinionated Tech Matrix that helps you navigate the overwhelming CNCF landscape. https://rawkode.academy/technology/matrix 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild [https://www.bretfisher.com/theguild] 🍾 ★Show Links★ * RawKode Academy website [https://rawkode.academy] * David's Discord [https://discord.gg/rawkode] * David's LinkedIn [https://www.linkedin.com/in/rawkode/] * David on social media: @rawkode everywhere Check out the video podcast version here: https://youtu.be/1LigTOlFiYk [https://youtu.be/1LigTOlFiYk] Creators & Guests * Cristi Cotovan [https://podcast.bretfisher.com/people/cristi-cotovan] - Editor * Bret Fisher [https://podcast.bretfisher.com/people/bret-fisher] - Host * Beth Fisher [https://podcast.bretfisher.com/people/beth-fisher] - Producer * David Flanagan [https://podcast.bretfisher.com/people/david-flanagan] - Guest You can also support this podcast by subscribing to my YouTube [https://www.youtube.com/@BretFisher] channel and my weekly newsletter at bret.news [https://bret.news/]! Grab the best coupons for my Docker and Kubernetes courses [https://www.bretfisher.com/courses]. Join my cloud native DevOps community on Discord [https://devops.fan/]. Grab some merch at Bret's Loot Box [https://bretfisher.myspreadshop.com/] Homepage bretfisher.com [https://bretfisher.com/] * (00:00) - Intro * (04:46) - Opinions on HashiCorp * (09:34) - The CNCF Landscape * (11:03) - Opinionated Tech Matrix * (18:28) - Tech Matrix in Detail * (28:51) - The Advocate List * (29:35) - Cloud Events and CUE * (30:52) - SpiceDB and Teleport * (32:18) - Service Meshes: Linkerd vs. Istio * (33:03) - Kubernetes and CNI * (33:58) - Observability Tools * (34:39) - WebAssembly and Rust * (35:25) - Learning Paths and DevOps * (43:12) - Key Takeaways * (46:10) - Database Fundamentals