Microsoft's images are usually updated at the same time as the Windows image, but official images may not be.Īlternatively, use the Dockerfile from a derived image to make your own "golden" image. If you use a derived image, make sure it has the same release cadence as the base images.
#Docker desktop windows 7 update
If you use a derived image, you have a dependency on the image owner to update their image, before you can update yours. If you build your images from the Windows base image, you just need to rebuild to get the latest updates.
#Docker desktop windows 7 full version
To support that, Microsoft release regular updates to the base images on Docker Hub, tagging them with a full version number ( 3.693 is the current version).īase image updates usually happen monthly, so the latest Windows Server Core and Nano Server images have all the latest security patches applied. Instead, you build a new image with the latest patches and replace your running container. When you have a Windows app running in a Docker container, you don't connect to it and run Windows Update to apply security patches. NET runtime and SDK installed.Ī note of caution about derived images. openjdk - OpenJDK Java runtime installed.
It's easier to distribute, has a smaller attack surface, starts more quickly, and runs more leanly.īeing slimmed down may have problems though - certain Windows APIs just aren't present in Nano Server, so while your app may build into a Docker image it may not run correctly. Nano Server is preferred because it is so drastically slimmed down. I've successfully used Nano Server as the base image for Go, Java and Node.js apps.
Update! For a full walkthrough on Dockerizing Windows apps, check out my book Docker on Windows and my Pluralsight course Modernizing. Windows Server Core runs in Docker which means you can run pretty much any server or console application in Docker. You can run any application in Docker as long as it can be installed and executed unattended, and the base operating system supports the app.