writing-dockerfiles

Multi-stage builds minimize final Docker image size by copying only compiled artifacts from builder stages to a minimal runtime base. This Skill generates language-specific multi-stage patterns for Python, Node.js, Go, Rust, and Java to produce production-ready images.

BuildKit cache mounts accelerate Docker builds by persisting package manager directories across runs. This Skill implements BuildKit-enabled optimizations including cache mounts, secret mounts, and parallel stages for faster, safer CI/CD pipeline integration.

Non-root execution hardens Docker security by preventing privilege escalation attacks inside the container. This Skill applies security hardening patterns using distroless base images and non-root users to create secure, production-grade containers.

Yes, this Skill applies language-specific Dockerfile patterns for Python, Node.js, Go, Rust, and Java. It covers base image choices, cache strategies, and security hardening tailored to each language stack's deployment context.

Yes, this Skill returns reusable Dockerfile strategies, snippet examples, and integration notes specifically suitable for CI/CD pipelines. It provides production-ready patterns that standardize container builds across automated deployment workflows.

Distroless images reduce Docker image size by removing package managers, shells, and unnecessary OS utilities from the final runtime layer. This Skill uses distroless and minimal base runtime patterns to craft secure, minimal Dockerfiles.