Pulling an Image

Pull images from Docker Hub with docker pull and pin version tags instead of relying on latest.

docker pull

docker pull downloads an image from a registry (Docker Hub by default) to your local machine, without running it.

docker pull nginx:latest
docker images   # list local images

nginx without a tag means nginx:latest, which changes over time. Pin a version like nginx:1.27 for reproducible builds.