Containers run from image files, and image files are created by Dockerfiles. As developers we write Dockerfiles start with a base image and copy files into it to make the final image. But why do we need the base image? How do we know what's in it? What do we gain or lose by using that base image vs other ones? Other than the files we add, what else is in the final image?

Container Images aren't a black box. We can look open them up and look inside! In this session we'll open up images, and create a few from scratch to. Going over the basics of what an image is made of, spend time dissecting one, and even make our own from scratch. We'll also discuss why the image internals help us our manage supply-chain security for SBOMs. By the end of the session, we should have a better understanding of what an image is, what files are in there, and why it exists that way.