Enforce Dockerfile best practices for secure, reproducible container images.
npx skills add https://github.com/iceflower/agent-skills --skill dockerfile-iceflower
Please help me install this Agent Skill. Skill: dockerfile Source: https://github.com/iceflower/agent-skills/tree/main/dockerfile Command: npx skills add https://github.com/iceflower/agent-skills --skill dockerfile-iceflower
Dockerfiles often suffer from bloated images, insecure defaults, and unstable builds. This skill provides a structured set of best practices to produce lean, secure, and reproducible container images.
Follow these guidelines to audit and improve your Dockerfiles, then run the lint tool on your repo to enforce compliance.
High-intent search queries and answers about installing and using this skill.
To write a secure Dockerfile, enforce non-root USER deployment, add HEALTHCHECK instructions, and apply proper FROM image tagging. These practices harden container images by eliminating insecure default runtime privileges and ensuring service availability is monitored.
The best way to minimize Docker image size is using multi-stage builds. This technique separates build-time dependencies from the runtime environment, discarding compilers and intermediate files to produce lean and reproducible container images.
Use BuildKit cache mounts and secret mounts in a Dockerfile to accelerate and secure builds. Cache mounts persist package manager downloads across builds, while secret mounts securely pass credentials without exposing them in intermediate image layers.
Yes, this Dockerfile guidance applies to Java Spring Boot and multi-arch deployments. It provides specific best practices for base image selection, layer caching strategies, and BuildKit configurations tailored for these frameworks and architectures.
Configure a .dockerignore file to exclude local artifacts and secrets, and order Dockerfile instructions from least to most frequently changing to optimize layer caching. This combination ensures reproducible builds and maximizes cache hits during CI pipelines.
minhquan2904Initialize project Base Knowledge by copying base_knowledge/ and deriving standards from source code.
k2worksDeploy Docker images across development, staging, and production environments.
ToanPV90Scan container images for vulnerabilities and misconfigurations using Trivy and Grype.
levanminhducGuide containerization of applications with Dockerfiles, Compose, and CI/CD pipelines.
