Docker / containers = 2026 standard app packaging. Production: multi-stage builds + scanning + registry + OCI compliance. Strong Africa adoption.
TL;DR
- Docker = de facto containers standard.
- Multi-stage builds: images < 100 MB.
- Scan: Trivy, Snyk, Grype.
- Registry: ghcr, ECR, GAR, Harbor.
Multi-stage best practices
- Node.js Dockerfile example:
- # Stage 1: build
- FROM node : 20-alpine AS build
- WORKDIR /app
- COPY package*.json ./
- RUN npm ci
- COPY . .
- RUN npm run build
- # Stage 2: runtime
- FROM node : 20-alpine
- WORKDIR /app
- COPY --from=build /app/dist ./dist
- COPY --from=build /app/node_modules ./node_modules
- USER node
- EXPOSE 3000
- CMD ["node", "dist/server.js"]
- Final image : 80-150 MB vs 800+ MB monolithic
Security
Layers :
- Minimal base image (distroless, alpine)
- Non-root USER (never prod root)
- No secrets in layers
- Multi-stage (no build tools prod)
- SBOM (Software Bill of Materials)
- Image signing (Cosign)
- Pinned versions (no :latest)
Scan tools :
- Trivy: open source, fast
- Snyk: SaaS, rich CVE base
- Grype: Anchore CLI
- Docker Scout: integrated Docker
- CI integration : block PR if CVE high+
Registry options
Public :
- Docker Hub (anonymous pull limits)
- GHCR: free OSS
- Quay: Red Hat
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Private cloud :
- AWS ECR
- GCP Artifact Registry
- Azure Container Registry
- Africa Liquid Telecom registry
Self-hosted :
- Harbor (CNCF, recommended)
- Distribution registry
- JFrog Artifactory enterprise
OCI standard
- OCI = Open Container Initiative:
- Image spec (manifest, layers)
- Runtime spec (runc, containerd, CRI-O)
- Distribution spec (registry API)
Why matters :
- Runtime portability
- OCI Helm charts
- OCI artifacts (config, signatures)
FAQ
Q: Docker vs Podman?
A: Podman daemonless + rootless. Drop-in Docker replacement most cases. OCI compatibility.
Q: Optimal image size?
A: <200 MB ideal. distroless = <50 MB for Go binaries.
Conclusion
2026 Africa Docker containers production: multi-stage + scan + private registry = mature stack. Image security + signing + SBOM = 2026 standard. Universal adoption, K8s ready.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.