Write a Good Dockerfile in 19 “Easy” Steps

This misses the most important security step of all: when you specify an exact tag, instead find the hash of the specific image and use that instead, e.g.:<p><pre><code> FROM ubuntu@sha256:01234567...</code></pre>