{"id":4599,"date":"2026-07-16T17:27:38","date_gmt":"2026-07-16T17:27:38","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/07\/16\/from-the-captains-chair-mohammad-ali-arabi\/"},"modified":"2026-07-16T17:27:38","modified_gmt":"2026-07-16T17:27:38","slug":"from-the-captains-chair-mohammad-ali-arabi","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/07\/16\/from-the-captains-chair-mohammad-ali-arabi\/","title":{"rendered":"From the Captain\u2019s Chair: Mohammad-Ali A\u2019r\u00e2bi"},"content":{"rendered":"

Docker Captains are leaders from the developer community that are both experts in their field and are passionate about sharing their Docker knowledge with others. \u201cFrom the Captain\u2019s Chair\u201d is a blog series where we get a closer look at one Captain to learn more about them and their experiences.<\/em><\/p>\n

Today we are interviewing Mohammad-Ali A\u2019r\u00e2bi, a Docker Captain based in the sunniest German city, Freiburg. He is the author of the book \u201c<\/em>Docker and Kubernetes Security<\/em><\/a>,\u201d a Best DevOps Book of the Year finalist in 2025. He is also a software engineer, public speaker, and community builder, organizing Docker meetups in Freiburg since 2022.<\/em> Mohammad-Ali is originally from Iran and has a BSc in Mathematics and an MSc in Computer Science.<\/em><\/p>\n

\n
\n<\/div>\n<\/figure>\n
\"image5\"<\/figure>\n

Caption: Docker Captains Summit in Istanbul, I\u2019m the one with a red hat<\/em><\/p>\n

Can you share how you first got involved with Docker?<\/h2>\n

In 2015, I was working at Cafe Bazaar, a tech company in Iran, as a backend engineer. Our backend was running on Django, so for a whole week, I listened to Django Reinhardt<\/a> while trying to spin up the project. I was failing because of the dependency hell.<\/p>\n

A colleague casually mentioned, \u201cYou can perhaps try using Docker; we\u2019re using it in the CI.\u201d Docker was 2 years old at the time, and I had never heard of it before.<\/p>\n

So, I disappeared for one week, learning Docker, and next thing you know, I was creating CI pipelines for other projects.<\/p>\n

\n \"image3\"\n <\/div>\n

Caption: Cafe Bazaar in Iran, I\u2019m the one in the red T-shirt (middle)<\/em><\/p>\n

What inspired you to become a Docker Captain?<\/h2>\n

Between 2018 and 2019, I was working in Amsterdam. We had tech meetups quite often there, and I loved it about Amsterdam. We moved back to Freiburg in 2019, and I started working at a smaller company, where I introduced git, CI\/CD pipelines, and Docker. People would come to me with their git and Docker questions. So, I decided to write them down on a Medium blog for my own later reference. But I learned the content is useful for the community, so I kept on writing. At some point, I was writing a blog post on git every week.<\/p>\n

When the pandemic hit, I got depressed, so I decided to start a meetup group in Freiburg, because otherwise, there was none. I attended an online Docker Community All Hands and an online KubeCon, and in the meantime, I was looking for venues to host my first meetup.<\/p>\n

\n

I will bring my coffee!<\/strong><\/em><\/p>\n<\/blockquote>\n

In 2022, I got a LinkedIn message from a CEO trying to hire me. I told him, \u201cI just got a new contract, but we can talk about other collaborations.\u201d We set up a meeting, and I wrote, \u201cI will bring my coffee!\u201d It was because their office was in the same building as where I live. I went down there, having a Docker-branded mug filled with coffee (caff\u00e8 crema with a stain of milk), saying, \u201cHello, neighbors!\u201d They agreed on hosting an in-person Docker meetup.<\/p>\n

\n \"image1\"\n <\/div>\n\n

Our first meetup was in November 2022, and we had only one attendee, who came all the way from Strasbourg, France. In the end, it was him, my wife, me, one of the founders and her boyfriend, and an engineer from the company.<\/p>\n

Our second meetup was a watching party, watching Docker Community All Hands. By that time, I had two blog posts published on Docker\u2019s blog, I had a talk at that particular event, and I won the title of best Docker Community Leader.<\/p>\n

When I applied to become a Captain in early 2023, many already knew me at Docker.<\/p>\n

What are some of your personal goals for the next year?<\/h2>\n

I want to double down on education and storytelling.<\/p>\n

I recently published Black Forest Shadow<\/a>, a fantasy story set in 1865 Freiburg that teaches container security through narrative. It\u2019s part of a bigger idea I\u2019m exploring: making complex DevOps concepts memorable through story, visuals, and characters. One other project I\u2019m working on is the workshop series Docker Commandos<\/a>, with which I introduce different Docker commands.<\/p>\n

On the technical side, I\u2019m working on the second edition of Docker and Kubernetes Security, especially covering Docker Hardened Images<\/a>.<\/p>\n

\"image8\"<\/figure>\n

Caption: Docker Commandos Pack<\/em><\/p>\n

And on the community side, I want to grow the Freiburg meetup into something more consistent and connected to the broader ecosystem. It\u2019s already a CNCF chapter as well, but I have been playing with the idea of starting a Java User Group (JUG) to attract a wider audience.<\/p>\n

If you weren\u2019t working in tech, what would you be doing instead?<\/h2>\n

I would probably have become a mathematics professor researching logic. I did an unfinished master\u2019s in Iran researching Categorial Grammar, which models natural languages using mathematical logic. My master\u2019s thesis<\/a> in Computer Science was also basically mathematical logic.<\/p>\n

Or I would have become a researcher in ancient languages. I can read Old Persian cuneiform and Book Pahlavi, which is currently not fully deciphered, to be added to the Unicode. If I weren\u2019t doing tech, I would dedicate my time to answering the remaining questions<\/a>.
<\/strong><\/p>\n

Can you share a memorable story from collaborating with the Docker community?<\/h2>\n

Publishing the book Docker and Kubernetes Security would not have been possible without the Docker community. So, the story goes like this:<\/p>\n

Shortly after I became a Docker Captain, Packt, the tech publisher, reached out to me and suggested that I write a book with them. I declined at first, as I didn\u2019t feel I was knowledgeable enough to write a book. But they were very persuasive.<\/p>\n

Two years later, I finished my manuscript and threw it over the fence. As I was waiting for them to do their magic, they went through a reorganization, and they finally said they can\u2019t prioritize my title. They wrote to me, \u201cYou can find a new publisher.\u201d I found a new publisher, and that was me.<\/p>\n

\"image2\"<\/figure>\n

Caption: Docker booth at WeAreDevelopers conference<\/em><\/p>\n

I started asking Docker Captains to review the work. I gave beta versions to our little Freiburg community. And when it came out, many Docker Captains, Docker employees, and members of the Docker community supported me by buying the book or spreading the word.<\/p>\n

What\u2019s your favorite Docker product or feature right now, and why?<\/h2>\n

Docker Hardened Images, because Shai Hulud is lurking in the deep, and Jack the Bitcoin Miner is installing cryptominers on every vulnerable server, so the ecosystem deserves an open-source, CVE-free set of base images. And this should be available to everyone, not only the paying customers, because we\u2019re all in this boat together.<\/p>\n

\n \"image9\"\n <\/div>\n

Caption: Jack the Bitcoin Miner fighting Gord the Guardian<\/em><\/p>\n

Can you walk us through a tricky technical challenge you solved recently?<\/h2>\n

Tech problems are usually not tricky; designing the solution is. It\u2019s tricky to understand if you\u2019re overengineering or if your solution is too simplistic and not future-proof. Last week, I was designing a new microservice, and I created a few rules for myself to guard-rail my solution:<\/p>\n

    \n
  1. Decisions should be able to be postponed.<\/strong> Don\u2019t lock in on a decision yet. I introduced interfaces for our repository and injected its implementation, so that if we decided on using a different database later, all we have to do is add a new implementation and change one line of code to inject it into the service.<\/li>\n
  2. There should be one way to do things.<\/strong> If you have three different ways to run the project locally, they will eventually go out of sync, and all end up broken. Choose a main solution, don\u2019t do Docker Compose and Devcontainers and local npm start all at the same time.<\/li>\n
  3. Automate everything.<\/strong> If things are manual, they are more prone to error and more time-consuming. If your deployment is SSHing into a server, changing a commit hash, and restarting the Docker Compose service, you\u2019re doing it wrong.<\/li>\n
  4. Don\u2019t trust AI.<\/strong> I use Claude Code, and I have to correct it half of the time, saying, \u201cDon\u2019t do that, do this.\u201d If you\u2019re letting the AI write your code while you\u2019re drinking coffee in the kitchen, you\u2019re in for disaster. Research<\/a> shows that a significant portion of AI-generated code is insecure.<\/li>\n
  5. Test everything.<\/strong> Add CI checks for everything. I had jobs for formatting, linting, running tests, checking the coverage, checking Docker image vulnerabilities, and even the commit messages. Now, based on the commit messages, I bump the version automatically using semantic versioning and trigger a new release.<\/li>\n<\/ol>\n

    What\u2019s one Docker tip you wish every developer knew?<\/h2>\n

    You can generate SBOM attestation upon build very easily, it\u2019s just passing a flag on CLI, setting a new argument on the CI job, or two lines of code if you\u2019re using Docker Bake.<\/p>\n

    \n \"image4\"\n <\/div>\n

    Caption: SBOM attestations make it easier to find CVEs<\/em><\/p>\n

    Using the CLI:<\/p>\n

    \n
    \n$ docker buildx build --sbom=true -t <image> .\n<\/pre>\n<\/div>\n
    If you\u2019re using Docker Bake:<\/p>\n
    \n
    \nvariable \"TAG\" {\n default = \"latest\"\n}\n\n\nvariable \"REPOSITORY\" {\n default = \"mithra-backend\"\n}\n\n\ngroup \"default\" {\n targets = [\"backend\"]\n}\n\n\ntarget \"backend\" {\n context = \".\"\n dockerfile = \"Dockerfile\"\n tags = [\"${REPOSITORY}:${TAG}\"]\n\n\n attest = [\n   {\n     type = \"provenance\"\n     mode = \"max\"\n   },\n   {\n     type = \"sbom\"\n   }\n ]\n}\n\n<\/pre>\n<\/div>\n
    Then you can build by:<\/p>\n
    \n
    \n$ docker bake\n<\/pre>\n<\/div>\n
    And in the CI:<\/p>\n
    \n
    \n- name: Build and push with docker bake\n  uses: docker\/bake-action@v5\n  with:\n    files: .\/docker-bake.hcl\n    push: true\n\n<\/pre>\n<\/div>\n
    If you\u2019re not using Docker Bake yet, it\u2019s worth looking into. It makes Docker build more delicious.<\/p>\n
    \n                \"image6\"\n        <\/div>\n
    Caption: Docker Commandos doing a bake-off competition in Asgard<\/em><\/p>\n
    If you could containerize any non-technical object in real life, what would it be and why?<\/h2>\n
    I would create snapshots of the world so that I can choose which version to live in. Sometimes I play Fallout: New Vegas to escape reality, which is ironic. But at least it has Big Iron<\/a> in it.<\/p>\n
    Where can people find you online?<\/h2>\n
    I have a website with all my links: aerabi.com<\/a><\/p>\n
    LinkedIn is my main social media platform; follow me there: \/in\/aerabi<\/a>.<\/p>\n
    And when I miss the good old Twitter, I sometimes write on BlueSky: @aerabi.com<\/a>.<\/p>\n
    Rapid Fire Questions<\/h2>\n
    \n        Cats or Dogs?
    \n    <\/h3>\n
    Homo Sapiens<\/p>\n
    \n        Morning person or night owl?
    \n    <\/h3>\n
    Vampire<\/p>\n
    \n        Favorite comfort food?
    \n    <\/h3>\n
    Fesenj\u0101n, but if you don\u2019t know what that is, sushi<\/p>\n
    \n        One word friends would use to describe you?
    \n    <\/h3>\n
    Crazy<\/p>\n
    \n        A hobby you picked up recently?
    \n    <\/h3>\n
    Writing dark fantasy. Though honestly, lately I just call it \u201cnon-fiction.\u201d<\/p>\n
    \"image7\"<\/figure>","protected":false},"excerpt":{"rendered":"
    Docker Captains are leaders from the developer community that are both experts in their field and are passionate about sharing […]<\/p>\n","protected":false},"author":1,"featured_media":4600,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[],"class_list":["post-4599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/4599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=4599"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/4599\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media\/4600"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=4599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=4599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=4599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}