Docker Extension

At Slim, we believe that knowing your software is a key building block to creating secure, small, production-ready containers and reducing software supply chain risk. One big challenge many of us face when attempting to work with, optimize, and secure container images, is that images often lack important documentation. Leaving us in a pinch when trying to figure out even basic details about whether or not an image is usable, well constructed, and secure.

This is where, we believe, the Slim Docker Extension can help.

Currently, the early access version of the Slim Docker Extension is free to developers and includes the following capabilities:

Available Free to All Developers without Authentication to the Slim Platform

  • Easy to access deep analyses of your local container images by tag with quick access to information like the local arch, exposed ports, shells, volumes, and certs
  • Security insights including whether the containers runs with a root user and a complete list of files that have special permissions
  • Optimization opportunities including a counts of deleted and duplicate files
  • Fully searchable File Explorer filterable by layer, instruction, and file type with the ability to view the contents of any text-based file
  • The ability to compare any two local images or image tags with deep analyses and File Explorer capabilities
  • Reverse engineered Dockerfiles for each image when the originals are not available.

Available with API Token Authentication to the Slim Platform (https://portal.slim.dev)

  • Search across multiple public and authenticated registries for quality images including support for Docker Hub, Github, DigitalOcean, ECR, MCR, GCR, with more coming soon.
  • View deep analysis, insights, and File Explorer for images across available registries prior to pulling them down to your local machine

How do I install the extension?

  • Make sure you’re running Docker Desktop version 4.9.0 or greater
  • Within Docker Desktop, click on Add Extensions in the left navigation under “Extensions”
  • You’ll be taken to the Extensions Marketplace, where you can find the Slim.AI extension about halfway down the list.
  • When you find the Slim.AI extension, click “Install.” The installation should take just a few seconds.

How do I use the Slim.AI Docker Extension?

  • Once installed, click on the Slim.AI extension in the left nav of Docker Desktop
  • You should see a “Welcome” screen. Go ahead and click to view our Terms and Privacy Policy. Then click “Start analyzing local containers”
  • The Slim.AI Docker Extension will list the images on your local machine
  • You can use the search bar to find specific images by name
  • Click the “Explore” button or carrot icon to view details about your images:
    • The File Explorer is a complete searchable view into your image’s file system. You can filter by layer, file type, and whether or not it is an Addition, Modification, or Deletion in a given layer. You can also view the content of non-binary files by clicking on the file name then clicking File Contents in the new window.
    • The Overview displays important metadata and insights about your image including the user, certs, exposed ports, volumes, environment variables, and more.
    • The Docker File shows a reverse engineered Dockerfile we generate when the original Dockerfile may not be available
  • Click the “Compare” button to compare two images or image tags.
    • Select the tag via the dropdown under the image name. Then click the “Compare” button in its card.
    • Select a second image or tag, and click “Compare” button in its card.
    • You will be taken to a comparison view where you can explore the differences in the files, metadata, and reverse engineered Dockerfiles.

How do I connect the Slim.AI Docker Desktop Extension to my Slim.AI Account?

  • Once installed. Click on the Slim.AI extension in the left nav of Docker Desktop
  • Inside of the Slim.AI Docker Extension, click on the “hamburger” menu in the top right corner. You should see the option to “Add a token”
  • To get your API token, navigate to https://portal.slim.dev/settings and click the Tokens tab.
  • Create a new API token, and copy it
  • Navigate back to the Slim Docker Extension and paste it in and click Submit
  • You should see a success message. Once successfully connected, you can use the search bar to search over all of your connected registries, and Explore remote images before pulling them down to your local machine.

What if I don’t have a Slim.AI account?

The Slim platform is currently free to use. You can create an account from the Docker Extension by clicking the Join Now button in the top right of the extension. You will be taken to a sign in page where you can authenticate using Github, Gitlab, or Bitbucket.

What’s on the roadmap?

We have a number of features and refinements planned for the extension, but we need your feedback to help us improve. Please provide your feedback here.

Planned capabilities include:

  • The ability to compare local and remote images
  • Improvements to the Overview to provide more useful insights
  • Design and UX updates to make the experience even easier to use
  • More capabilities that connect your local experience to the Slim Portal