adding docker resources for class

docker-and-k8s-security/docker/Dockerfile.distroless

@@ -0,0 +1,24 @@
+### First Stage ###
+# Base Image
+FROM node:12-slim as build
+WORKDIR /usr/src/app
+
+# Install Dependencies
+COPY package*.json ./
+RUN npm install
+
+# Copy in the application we created
+COPY . .
+
+### Second Stage ###
+FROM gcr.io/distroless/nodejs:12
+
+# Copy App + Dependencies from Build Stage
+COPY --from=build /usr/src/app /usr/src/app
+WORKDIR /usr/src/app
+
+# Set User to Non-Root
+USER 1000
+
+# Run Server
+CMD [ "server.js" ]

docker-and-k8s-security/docker/Dockerfile.naive

@@ -0,0 +1,13 @@
+# Base Image
+FROM node:12-slim
+WORKDIR /usr/src/app
+
+# Install Dependencies
+COPY package*.json ./
+RUN npm install
+
+# Copy in Application
+COPY . .
+
+# Run Server
+CMD [ "server.js" ]

docker-and-k8s-security/docker/Dockerfile.non-root

@@ -0,0 +1,16 @@
+# Base Image
+FROM node:12-slim
+WORKDIR /usr/src/app
+
+# Install Dependencies
+COPY package*.json ./
+RUN npm install
+
+# Copy in Application
+COPY . .
+
+# Set User to Non-Root
+USER node
+
+# Run Server
+CMD [ "server.js" ]

docker-and-k8s-security/docker/Makefile

@@ -0,0 +1,20 @@
+run:
+	docker run -i -d -p 8080:8080 node-distroless 
+
+build-naive:
+	docker build \
+	-f $(CURDIR)/Dockerfile.naive \
+	-t node-naive \
+	.
+
+build-non-root:
+	docker build \
+	-f $(CURDIR)/Dockerfile.non-root \
+	-t node-non-root \
+	.
+
+build-distroless:
+	docker build \
+	-f $(CURDIR)/Dockerfile.distroless \
+	-t node-distroless \
+	.

docker-and-k8s-security/docker/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "hello-world",
+  "version": "1.0.0",
+  "description": "",
+  "main": "server.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "ISC"
+}