skills.rest
DaichiHoshina
DaichiHoshinaCOMMUNITY
Explore all skills by this author →
𝕏@last_resort_dhGitHub

dockerfile-best-practices

Enforce multi-stage builds, caching, and security hardening in Dockerfiles.

Updated Aug 23, 2026
Search Tags:#security#caching#docker#dockerfile#hadolint#image-size#multistage-build
One-click install
npx skills add https://github.com/DaichiHoshina/ai-tools --skill dockerfile-best-practices
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dockerfile-best-practices
Source: https://github.com/DaichiHoshina/ai-tools/tree/main/claude-code/skills/dockerfile-best-practices
Command: npx skills add https://github.com/DaichiHoshina/ai-tools --skill dockerfile-best-practices

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dockerfile best practices to reduce image sizes, speed up builds, and strengthen security across Docker-based projects.

Core Features & Use Cases

  • Multi-stage builds to shrink final images and separate build vs runtime environments.
  • Cache optimization by ordering and consolidating RUN commands.
  • .dockerignore to exclude unnecessary files and protect secrets.
  • Security hardening with non-root users and minimal base images (Distroless/base variants).
  • Optional vulnerability scanning and linting with Hadolint to improve quality.
  • Comprehensive checklists and reference resources for consistent practices.

Quick Start

Follow these guidelines whenever you create or refactor a Dockerfile to minimize image size, improve security, and optimize builds.

Frequently Asked Questions about dockerfile-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I reduce Docker image size and speed up builds?▼

Reduce Docker image size and speed up builds by enforcing multi-stage builds to separate build and runtime environments, consolidating RUN commands for cache optimization, and using .dockerignore to exclude unnecessary files.

What is the best way to secure a Dockerfile and minimize the attack surface?▼

Secure a Dockerfile and minimize the attack surface by using non-root execution, selecting minimal base images like distroless variants, and applying .dockerignore to protect secrets from leaking into the build context.

Does this Dockerfile best practices guidance work with Python and Node.js projects?▼

Yes, this Dockerfile best practices guidance applies directly to Python, Node.js, and Go projects, providing deterministic rules for creating lean and secure images across these specific runtime environments.

How do I lint a Dockerfile and scan for vulnerabilities during the build process?▼

Lint a Dockerfile and scan for vulnerabilities by integrating Hadolint into your workflow, which enforces deterministic best-practice checks and improves overall image quality and security.

Why should I use distroless base images instead of standard OS images in Docker?▼

Use distroless base images instead of standard OS images to shrink final image sizes and strengthen security by stripping out unnecessary operating system packages that increase the attack surface.

Related Skills

Explore More Software Engineering Skills→
nopperabbonopperabbo
7

dockerfile-generator

Generate Dockerfiles and .dockerignore files with multi-stage builds and validation.

Community
Advanced
balsm-healthbalsm-health
2

hardening-docker-containers-for-production

Automate Docker container hardening with CIS Docker Benchmark v1.8.0.

Official
Advanced
cenjiecenjie

github-actions-templates

Generate GitHub Actions workflows for testing, building, and deploying applications.

Community
Advanced
Sir-chawakornSir-chawakorn
9

dockerfile-optimize

Refactors Dockerfiles into multi-stage builds with distroless images and non-root execution.

Community
Advanced