docker

Standardize Docker containerization with secure Dockerfile and Compose practices.

9|1|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/calcosmic/Aether --skill docker-calcosmic
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: docker
Source: https://github.com/calcosmic/Aether/tree/main/.aether/skills-codex/domain/docker
Command: npx skills add https://github.com/calcosmic/Aether --skill docker-calcosmic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Docker projects often suffer from bloated images, insecure configurations, and brittle deployments. This skill provides a structured set of best practices to streamline containerization workflows, reduce risk, and improve reliability across teams.

Core Features & Use Cases

  • Dockerfile Construction: promote multi-stage builds, cache-aware layers, and pin base image versions for reproducible builds.
  • Image Security and Operational Hygiene: run as non-root, avoid secrets in images, minimize attack surface, and use dockerignore effectively.
  • Compose, Networking, Logging, and Health: guidance for service orchestration, network isolation, stdout logging, and health checks to ensure robust deployments.
  • Use Case: when building microservices or web apps, apply these guidelines to produce smaller, secure, and maintainable container artifacts.

Quick Start

Implement multi-stage builds and non-root containers to start applying Docker best practices today.

Frequently Asked Questions about docker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write a Dockerfile using multi-stage builds to reduce image size?

Multi-stage builds in a Dockerfile separate the build environment from the final runtime image, discarding build dependencies to minimize image size and reduce attack surface. Use multi-stage builds to produce smaller, secure, and maintainable container artifacts.

What are the best practices for Docker container security and running as non-root?

Docker container security best practices mandate running as a non-root user, avoiding secrets in images, and minimizing the attack surface. Enforce non-root execution and effective dockerignore usage to ensure secure, reliable container deployments.

How to configure Docker Compose for service orchestration, networking, and health checks?

Docker Compose configuration for service orchestration requires defining network isolation, stdout logging, and health checks. Apply Docker Compose guidance for networking, logging, and health checks to ensure robust deployments across multiple containers.

Why should I pin base image versions in a Dockerfile for reproducible builds?

Pinning base image versions in a Dockerfile ensures reproducible builds by preventing unexpected changes from upstream image updates. Explicit version pinning standardizes containerization workflows, guaranteeing that builds remain consistent across different environments and deployments.

What is the best way to handle secrets and caching strategies in Docker images?

Handling secrets in Docker images requires avoiding sensitive data in image layers, while caching strategies use cache-aware layers to optimize build times. Enforce secrets handling and caching strategies to standardize containerization and improve build reproducibility.

Do I need to set resource limits and logging for Docker containers in production?

Setting resource limits and logging for Docker containers in production ensures operational hygiene and prevents resource exhaustion. Configure explicit resource limits and stdout logging to maintain robust deployments and reliable container performance.