https://socake.github.io/categories/%E5%AE%B9%E5%99%A8%E5%8C%96/ Recent content in 容器化 on 黄文卓 | DevOps Engineer Hugo -- gohugo.io zh-CN 17691281867@163.com (Wenzhuo Huang) 17691281867@163.com (Wenzhuo Huang) © 2026 Wenzhuo Huang Wed, 18 Mar 2026 10:00:00 +0800 https://socake.github.io/posts/container-image-build-optimization/ Wed, 18 Mar 2026 10:00:00 +0800 17691281867@163.com (Wenzhuo Huang) https://socake.github.io/posts/container-image-build-optimization/ 深入剖析容器镜像构建优化的每个环节：BuildKit 并行构建与 Secrets 注入、Go/Python/Node.js 多阶段 Dockerfile 模板、–mount=type=cache 与远程缓存、Distroless vs Alpine 选型、dive 分析层内容，以及完整的供应链安全闭环（syft SBOM + Cosign 签名 + K8s 准入控制验签）。