docker-expert

Multi-stage builds separate the build environment from the runtime environment, copying only necessary artifacts to the final image. This skill automates refactoring Dockerfiles to use this pattern, minimizing image size while preserving build-time tooling.

Configuring Docker containers to run as a non-root user involves creating dedicated service accounts in the Dockerfile and dropping root privileges. This skill enforces non-root configurations and restricted capabilities to harden runtime security.

Handling secrets in Docker CI/CD workflows requires passing sensitive data without baking it into image layers. This skill provides guidance on secure secrets handling and management practices across local development and orchestration workflows.

Adding robust health checks to Docker Compose deployments involves defining test commands in your configuration to monitor container status. This skill implements production-ready orchestration patterns with health checks and resource limits for scalable deployments.

Docker builds become slow and bloated when unnecessary dependencies and build tools are included in the final runtime image. This skill audits your Dockerfile for security hotspots and enforces minimal base images to streamline delivery pipelines.

Yes, hardening containers with non-root configurations, minimal base images, and restricted capabilities applies across local development and CI/CD. This skill provides production-ready patterns for integrating with Docker Compose and various orchestration workflows.