https://notes.burelli.xyz/tags/build/Recent content in Build on Buro notesHugoen-usThu, 22 Oct 2026 01:11:58 +0200https://notes.burelli.xyz/posts/engineering/docker-containers/Wed, 21 Oct 2026 00:29:59 +0200https://notes.burelli.xyz/posts/engineering/docker-containers/<h1 id="docker-containers-management">Docker containers management</h1> <h2 id="why">Why</h2> <p>Label everything, so you can:</p> <ul> <li><strong>filter</strong> metrics (Prometheus) and logs (Loki) by service, env, version</li> <li><strong>track the full chain</strong>: log/metric → container → image → git commit → code</li> </ul> <h2 id="labels">Labels</h2> <ul> <li>Use Docker labels for all the metadata.</li> <li><strong>Build labels</strong>: use the <a href="https://github.com/opencontainers/image-spec/blob/main/annotations.md" target="_blank" rel="noopener noreferrer">OCI standard keys</a>, already understood by registries, scanners, Renovate, GitHub, &hellip;</li> <li><strong>Run labels</strong>: define your own <strong>prefix</strong> to avoid collisions with other tools&rsquo; labels (e.g. <code>acme_</code>).</li> </ul> <table> <thead> <tr> <th>Label</th> <th>Set at</th> <th>Example</th> </tr> </thead> <tbody> <tr> <td><code>org.opencontainers.image.source</code> (git repo)</td> <td>build</td> <td><code>https://github.com/acme/orders</code></td> </tr> <tr> <td><code>org.opencontainers.image.revision</code> (git commit)</td> <td>build</td> <td><code>3f9c2a1</code></td> </tr> <tr> <td><code>org.opencontainers.image.version</code> (image tag)</td> <td>build</td> <td><code>1.4.0</code></td> </tr> <tr> <td><code>org.opencontainers.image.created</code> (build date)</td> <td>build</td> <td><code>2026-10-21T10:00:00Z</code></td> </tr> <tr> <td><code>acme_release_date</code></td> <td>run</td> <td><code>2026-10-22T08:30:00Z</code></td> </tr> <tr> <td><code>acme_env</code></td> <td>run</td> <td><code>production</code></td> </tr> <tr> <td><code>acme_service</code></td> <td>run</td> <td><code>orders</code></td> </tr> <tr> <td><code>acme_host</code></td> <td>run</td> <td><code>node-1</code></td> </tr> </tbody> </table> <p>Image labels are inherited by the containers, so every container carries both build and run labels.</p>