Docker Hardened Images went open source in December 2025. First launched in May 2025 as a secure, minimal, production-ready image set, DHI is now free for every developer. This episode of the Changelog features Tushar Jain, EVP of Engineering at Docker, explaining what that actually means for software teams shipping containers.
The conversation covers what makes these images hardened in practice: reduced attack surface, minimal dependencies, and production readiness baked in from the start. Jain does not just announce the open source move. He walks through the engineering decisions behind the image design, which is where the episode earns its runtime.
If you ship containers and you are still rolling your own base images or trusting unvetted upstream layers, this is required listening. The full catalog is browsable at hub.docker.com/hardened-images/catalog. Changelog++ members get 6 additional minutes of conversation not in the public feed.
[READ ORIGINAL →]