Guide Dockerfile construction for small, secure, reproducible container images.
npx skills add https://github.com/prapanch/agent-coda --skill container-craft
Please help me install this Agent Skill. Skill: container-craft Source: https://github.com/prapanch/agent-coda/tree/main/devops/container-craft Command: npx skills add https://github.com/prapanch/agent-coda --skill container-craft
This Skill helps you prevent slow builds, oversized images, and avoidable container vulnerabilities by applying consistent Docker and OCI container construction practices.
Use cases include writing and reviewing Dockerfiles, troubleshooting slow/unsafe container builds, and hardening images before deploying to production environments.
Ask the agent to review your Dockerfile and propose a multi-stage, pinned-version, non-root build that includes a correct .dockerignore, health check, and security checklist.
High-intent search queries and answers about installing and using this skill.
Optimize Dockerfile layer caching by ordering instructions from least to most frequently changed, placing stable dependencies early and application code last to maximize cache hits and reduce build times.
Multi-stage builds reduce image size by separating build-time dependencies from the runtime, copying only compiled artifacts to a lean final image to keep production containers small and secure.
The best way to run a non-root Docker container is by creating a dedicated user in the Dockerfile and using the USER instruction to enforce runtime hardening, minimizing the container's attack surface.
You need reproducible container builds with pinned versions when deploying production services that require reliable caching, predictable behavior, and consistent environments across different build stages.
Choosing between alpine, distroless, and scratch base images involves security and size tradeoffs; distroless minimizes the attack surface by excluding package managers while providing essential runtime libraries.
A .dockerignore file is needed for production builds to exclude unnecessary local files and secrets from the build context, preventing accidental inclusion in images and speeding up the build process.
BellaBeGenerate runnable application artifacts from manifests and targets.
riandeoliveiraReplace bloated base images with Google distroless runtime images.
afterworkGenerate multi-stage Dockerfiles, compose variants, and .dockerignore for codebases.
gnanirahulnutakkiAnalyze OCI specs, BuildKit, and multi-architecture container strategies.
