# Docker Containerization > Docker Containerization - Skill: `dnyoussef/docker-containerization` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add dnyoussef/docker-containerization` - Raw SKILL.md: https://api.skillmd.com/api/skills/dnyoussef/docker-containerization/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: DNYoussef (https://skillmd.com/u/dnyoussef) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/dnyoussef/docker-containerization --- /*============================================================================*/ /* DOCKER-CONTAINERIZATION SKILL :: VERILINGUA x VERIX EDITION */ /*============================================================================*/ --- name: docker-containerization version: 1.0.0 description: | [assert|neutral] Docker containerization specialist for multi-stage builds, layer caching optimization, security scanning with Trivy, Docker Compose orchestration, BuildKit advanced features, and production-grade Dock [ground:given] [conf:0.95] [state:confirmed] category: Infrastructure tags: - general author: system cognitive_frame: primary: aspectual goal_analysis: first_order: "Execute docker-containerization workflow" second_order: "Ensure quality and consistency" third_order: "Enable systematic Infrastructure processes" --- /*----------------------------------------------------------------------------*/ /* S0 META-IDENTITY */ /*----------------------------------------------------------------------------*/ [define|neutral] SKILL := { name: "docker-containerization", category: "Infrastructure", version: "1.0.0", layer: L1 } [ground:given] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S1 COGNITIVE FRAME */ /*----------------------------------------------------------------------------*/ [define|neutral] COGNITIVE_FRAME := { frame: "Aspectual", source: "Russian", force: "Complete or ongoing?" } [ground:cognitive-science] [conf:0.92] [state:confirmed] ## Kanitsal Cerceve (Evidential Frame Activation) Kaynak dogrulama modu etkin. /*----------------------------------------------------------------------------*/ /* S2 TRIGGER CONDITIONS */ /*----------------------------------------------------------------------------*/ [define|neutral] TRIGGER_POSITIVE := { keywords: ["docker-containerization", "Infrastructure", "workflow"], context: "user needs docker-containerization capability" } [ground:given] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S3 CORE CONTENT */ /*----------------------------------------------------------------------------*/ # Docker Containerization Specialist ## Kanitsal Cerceve (Evidential Frame Activation) Kaynak dogrulama modu etkin. Expert Docker containerization for production-grade, secure, and optimized container images. ## Purpose Comprehensive Docker expertise including multi-stage builds, layer caching, security scanning, Docker Compose, BuildKit features, and best practices. Ensures containers are small, fast, secure, and production-ready. ## When to Use - Creating optimized Dockerfiles - Implementing multi-stage builds - Optimizing build caching - Scanning images for vulnerabilities - Orchestrating multi-container apps with Docker Compose - Implementing CI/CD with Docker - Troubleshooting container performance ## Prerequisites **Required**: Basic Docker commands, understanding of containers vs VMs **Agents**: `cicd-engineer`, `security-manager`, `code-analyzer`, `backend-dev` ## Core Workflows ### Workflow 1: Multi-Stage Node.js Build ```dockerfile # syntax=docker/dockerfile:1 # Stage 1: Dependencies FROM node:18-alpine AS deps WORKDIR /app COPY package*.json ./ RUN npm ci --only=production && npm cache clean --force # Stage 2: Build FROM node:18-alpine AS builder WORKDIR /app COPY package*.json ./ RUN npm ci COPY . . RUN npm run build # Stage 3: Production FROM node:18-alpine AS runner WORKDIR /app # Security: Run as non-root RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001 # Copy only necessary files COPY --from=deps --chown=nodejs:nodejs /app/node_modules ./node_modules COPY --from=builder --chown=nodejs:nodejs /app/dist ./dist COPY --chown=nodejs:nodejs package.json ./ USER nodejs EXPOSE 3000 ENV NODE_ENV=production HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD node -e "require('http').get('http://localhost:3000/health', (res) => { process.exit(res.statusCode === 200 ? 0 : 1); })" CMD ["node", "dist/index.js"] ``` ### Workflow 2: Python Multi-Stage Build ```dockerfile # syntax=docker/dockerfile:1 FROM python:3.11-slim AS builder WORKDIR /app # Install build dependencies RUN apt-get update && apt-get install -y --no-install-recommends \ gcc \ && rm -rf /var/lib/apt/lists/* # Install Python dependencies COPY requirements.txt . RUN pip install --user --no-cache-dir -r requirements.txt # Production stage FROM python:3.11-slim WORKDIR /app # Copy Python dependencies from builder COPY --from=builder /root/.local /root/.local # Copy application code COPY . . # Security: Run as non-root RUN useradd -m -u 1001 appuser USER appuser # Add .local/bin to PATH ENV PATH=/root/.local/bin:$PATH EXPOSE 8000 HEALTHCHECK --interval=30s --timeout=3s \ CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')" CMD ["python", "-m", "uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"] ``` ### Workflow 3: Docker Compose Multi-Service App ```yaml # docker-compose.yml version: '3.8' services: app: build: context: . dockerfile: Dockerfile target: runner ports: - "3000:3000" environment: - NODE_ENV=production - DATABASE_URL=postgresql://user:password@db:5432/mydb depends_on: db: condition: service_healthy redis: condition: service_started networks: - app-network deploy: resources: limits: cpus: '1' memory: 512M reservations: cpus: '0.5' memory: 256M db: image: postgres:15-alpine environment: POSTGRES_USER: user POSTGRES_PASSWORD: password POSTGRES_DB: mydb volumes: - postgres-data:/var/lib/postgresql/data networks: - app-network healthcheck: test: ["CMD-SHELL", "pg_isready -U user"] interval: 10s timeout: 5s retries: 5 redis: image: redis:7-alpine networks: - app-network command: redis-server --appendonly yes volumes: - redis-data:/data networks: app-network: /*----------------------------------------------------------------------------*/ /* S4 SUCCESS CRITERIA */ /*----------------------------------------------------------------------------*/ [define|neutral] SUCCESS_CRITERIA := { primary: "Skill execution completes successfully", quality: "Output meets quality thresholds", verification: "Results validated against requirements" } [ground:given] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S5 MCP INTEGRATION */ /*----------------------------------------------------------------------------*/ [define|neutral] MCP_INTEGRATION := { memory_mcp: "Store execution results and patterns", tools: ["mcp__memory-mcp__memory_store", "mcp__memory-mcp__vector_search"] } [ground:witnessed:mcp-config] [conf:0.95] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S6 MEMORY NAMESPACE */ /*----------------------------------------------------------------------------*/ [define|neutral] MEMORY_NAMESPACE := { pattern: "skills/Infrastructure/docker-containerization/{project}/{timestamp}", store: ["executions", "decisions", "patterns"], retrieve: ["similar_tasks", "proven_patterns"] } [ground:system-policy] [conf:1.0] [state:confirmed] [define|neutral] MEMORY_TAGGING := { WHO: "docker-containerization-{session_id}", WHEN: "ISO8601_timestamp", PROJECT: "{project_name}", WHY: "skill-execution" } [ground:system-policy] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S7 SKILL COMPLETION VERIFICATION */ /*----------------------------------------------------------------------------*/ [direct|emphatic] COMPLETION_CHECKLIST := { agent_spawning: "Spawn agents via Task()", registry_validation: "Use registry agents only", todowrite_called: "Track progress with TodoWrite", work_delegation: "Delegate to specialized agents" } [ground:system-policy] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* S8 ABSOLUTE RULES */ /*----------------------------------------------------------------------------*/ [direct|emphatic] RULE_NO_UNICODE := forall(output): NOT(unicode_outside_ascii) [ground:windows-compatibility] [conf:1.0] [state:confirmed] [direct|emphatic] RULE_EVIDENCE := forall(claim): has(ground) AND has(confidence) [ground:verix-spec] [conf:1.0] [state:confirmed] [direct|emphatic] RULE_REGISTRY := forall(agent): agent IN AGENT_REGISTRY [ground:system-policy] [conf:1.0] [state:confirmed] /*----------------------------------------------------------------------------*/ /* PROMISE */ /*----------------------------------------------------------------------------*/ [commit|confident] DOCKER_CONTAINERIZATION_VERILINGUA_VERIX_COMPLIANT [ground:self-validation] [conf:0.99] [state:confirmed]