podmaster

Design, build, debug and secure OCI images and container runtimes for Docker, Podman, Kubernetes.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/kaynetik/skills --skill podmaster
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: podmaster
Source: https://github.com/kaynetik/skills/tree/main/podmaster
Command: npx skills add https://github.com/kaynetik/skills --skill podmaster

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Helps engineers design, build, secure, and troubleshoot OCI images and container runtimes so deployments are reproducible, minimal, and debuggable across Docker, Podman, and Kubernetes nodes.

Core Features & Use Cases

  • Image design & optimization: multi-stage builds, layer ordering, cache strategies, and minimal runtime images.
  • Runtime and tooling guidance: Docker Engine, BuildKit, Podman (rootless, pods, Quadlet), containerd, nerfctl/ctr, and crictl usage for node-level inspection.
  • Debugging & security: structured troubleshooting steps for crashes, networking, storage, and guidance on non-root execution, seccomp, capabilities, and CI image scanning.
  • Use Case: Review a Dockerfile for a Node app, propose a multi-stage refactor, recommend base image and cache ordering, and list commands to inspect a failing pod on a Kubernetes node.

Quick Start

Ask the podmaster skill to review my Dockerfile and suggest a minimal multi-stage refactor, required non-root user configuration, and commands to reproduce and inspect build and runtime failures.

Frequently Asked Questions about podmaster

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I optimize a Dockerfile using multi-stage builds for minimal runtime images?

Optimizing a Dockerfile with multi-stage builds involves ordering layers strategically, leveraging cache strategies, and selecting minimal runtime images to ensure deployments are reproducible and lightweight.

How do I debug a failing Kubernetes pod on a node using containerd and crictl?

Debugging a failing Kubernetes pod requires node-level runtime inspection using containerd, ctr, crictl, and nerdctl to execute structured troubleshooting steps for crashes, networking, and storage issues.

What is the best way to configure rootless Podman with Quadlet for local development?

Configuring rootless Podman with Quadlet provides a systemd-native management approach for local development, ensuring secure, non-root execution and reproducible container runtime environments.

How do I secure OCI images with non-root execution and seccomp profiles in CI pipelines?

Securing OCI images involves applying non-root execution, seccomp, and capability restrictions alongside CI image scanning to harden deployments before they reach production runtimes.

Does BuildKit and buildx support cache strategies for faster CI/CD container image builds?

BuildKit and buildx support advanced cache strategies and layer optimization for CI/CD builds, enabling faster, reproducible image creation while maintaining minimal runtime footprints.

Why is my container runtime crashing and how do I inspect storage and networking issues?

Container runtime crashes are diagnosed through structured troubleshooting steps, inspecting node-level storage and networking configurations using runtime tools like crictl and nerdctl.