docker
Installation
SKILL.md
Docker
Official docs
| Topic | URL |
|---|---|
| Documentation | https://docs.docker.com |
| Dockerfile reference | https://docs.docker.com/reference/dockerfile/ |
| Compose | https://docs.docker.com/compose/ |
| Dev Containers | https://code.visualstudio.com/docs/devcontainers/containers |
Agent rules
- Multi-stage builds — separate build and runtime stages; pin base image digests or semver tags, not
latest. - Non-root — run app processes as non-root when the base image allows it.
- Layer cache — copy dependency manifests before source; order
COPYfor cache hits. - Secrets — never
ARGorENVfor API keys; use runtime env or secret mounts. - Match repo — copy existing Dockerfile/compose patterns before inventing new service names or networks.