Topic · 9 stories
9 stories tagged containers on AI Tamer, newest first.
docker run -p 8080:80 listens on all host addresses, IPv4 and IPv6, and Docker's own docs say its rules bypass ufw. Writing 127.0.0.1 in front of the port is the difference between a local service and a public one.
WSL 3.0.1 shipped on 29 September with WSL containers out of preview: a wslc.exe CLI (alias container.exe) and a containers API on NuGet. Here is what to run, how to update, and what 3.0.2 adds.
A bind mount overlays its container target, hiding files packaged there. Read-only protects the host source from container writes but does not preserve obscured image files.
An ephemeral container gives you a way to inspect a running Kubernetes pod when its application image lacks a shell or diagnostic tools.
CPU requests guide Pod placement. CPU limits cap a running container's CPU time.
A multistage Docker build can compile an application in one stage and copy the finished binary into a smaller final image.
Docker and Kubernetes ask a container to stop with SIGTERM and then kill it. Why some services never hear the request, and how to make sure yours finishes its writes before the grace period runs out.
A tag like :latest or :2.1 is a name that can be moved to a different image at any time. A digest cannot. What that means for what you run, and how to pin it.
Cloudflare’s Containers rebuild for on-demand agent sandboxes (blog Sep 30, 2026): durable_object scheduling, runtime image/instance pick, FS snapshots (~30-day TTL), cloudflare/debian-trixie. Legacy Container/Sandbox classes maintained through Dec 31, 2026—deployments keep running after; classes freeze. Burst TTI / 100k figures are vendor-reported.
