skills.rest
tomspiegl
tomspieglCOMMUNITY
Explore all skills by this author →
GitHub

hetzbot-docker

Install and harden Docker Engine with secure daemon.json settings.

Updated Apr 17, 2026
Search Tags:#security#docker#idempotent#installation#hardening#daemon#compose-plugin
One-click install
npx skills add https://github.com/tomspiegl/hetzbot --skill hetzbot-docker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hetzbot-docker
Source: https://github.com/tomspiegl/hetzbot/tree/main/skills/infra/docker
Command: npx skills add https://github.com/tomspiegl/hetzbot --skill hetzbot-docker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Install Docker Engine + Compose plugin on a host and harden the daemon for secure, reliable operation.

Core Features & Use Cases

  • Install Docker Engine and Compose plugin from the official repository on Debian-based hosts.
  • Apply security hardening to /etc/docker/daemon.json (journald log driver, live-restore, no-new-privileges, userland-proxy false) and enable unattended upgrades.
  • Provide audit and validation via review.sh to ensure daemon is active and properly configured.

Quick Start

Install and harden Docker on the target host using the provided install script.

Frequently Asked Questions about hetzbot-docker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I install and harden Docker Engine on a Debian server?▼

Install and harden Docker on a Debian host by provisioning the Engine and Compose plugin from the official repository, then applying secure defaults like live-restore and journald logging to the daemon configuration.

What security hardening configurations should I apply to the Docker daemon?▼

Docker daemon hardening involves configuring /etc/docker/daemon.json with journald log driver, live-restore, no-new-privileges, and userland-proxy false to ensure secure and reliable container operation.

Can I use this Docker hardening approach for deterministic, idempotent server setups?▼

Yes, this approach automates a deterministic, idempotent Docker setup that applies consistent secure configurations across servers and enables unattended upgrades for ongoing maintenance.

Does this Docker installation method include the Compose plugin?▼

Yes, the installation method provisions both the Docker Engine and the Compose plugin directly from the official Debian repository to support complete container orchestration workflows.

How do I audit my Docker daemon configuration for security compliance?▼

Audit your Docker configuration by running the provided review.sh script, which validates that the daemon is active and properly configured with the intended hardening defaults.

Related Skills

Explore More Software Engineering Skills→
rennerenne

installation

Guide Proxmox VE installation and host administration from ISO setup to updates.

Community
Intermediate
BermudaLocalsBermudaLocals
1

docker-management

Automate Docker container lifecycle operations using standard Docker CLI commands.

Community
Intermediate
ipruningipruning
2

vps

Automate Linux VPS security auditing, hardening, and maintenance on Debian/Ubuntu servers.

Community
Advanced
RedHatProductSecurityRedHatProductSecurity
47

containerization

Enforce security best practices for containerizing MCP servers on OpenShift.

Official
Advanced