Docker Hardened Images (DHI) went open source in December 2025, six months after Docker launched them as a secure, minimal, production-ready image set in May. Tushar Jain, EVP of Engineering at Docker, joins the Changelog to explain what that actually means for developers who ship containers.
The conversation covers what makes these images hardened in the first place, why Docker held them behind a paywall initially, and what the open source release changes for teams building in production. The catalog is live on Docker Hub now.
The reason to read the full transcript is not the announcement. It is the technical detail on what minimal and hardened mean in practice, and what tradeoffs Docker made to get there. Jain is specific about the engineering decisions. That specificity is worth your time.
[READ ORIGINAL →]