What problem does it solve?
Provides practical, opinionated patterns to build smaller, more secure, and maintainable container images while making Dockerfiles and Compose setups easier to debug and operate.
Core Features & Use Cases
- Layer-order guidance to maximize cache hits when installing dependencies before copying application code.
- Multi-stage build patterns to separate build tooling from runtime artifacts and reduce final image size.
- Security and hardening advice: non-root users, minimal base images, read-only filesystems, and BuildKit secrets to avoid leaking credentials.
- Compose best practices: healthchecks, named volumes versus bind mounts, profiles for environment-specific services, and restart policies.
- Debugging and maintenance: image inspection, logs, exec shells, layer analysis, and integration with scanners like Trivy and Docker Scout.
- Use case: optimize a Node.js, Python, or Go service for production by converting a development Dockerfile into a multi-stage, cache-efficient, non-root runtime image with healthchecks and CI-friendly build args.
Quick Start
Convert your existing Dockerfile to a multi-stage build, reorder layers so dependencies are installed before source, enable BuildKit cache mounts, and add a HEALTHCHECK and non-root user for production readiness.