Containerization Plan
Core Workflow
- Identify app runtime, build process, target environment, ports, volumes, secrets, healthchecks, and deployment constraints.
- Choose image strategy: base image, multi-stage build, dependency caching, non-root user, filesystem layout, and startup command.
- Define runtime config: env vars, secrets, volumes, network, healthcheck, resource limits, and logs.
- Review size, reproducibility, security, and local development needs.
- Include build, run, smoke test, and publish steps.
- Flag risks before creating production images.
Safety Rules
- Do not bake secrets, tokens, private keys, or local paths into images.
- Do not run containers as root by default when a non-root runtime is practical.
- Do not publish images or push registries without explicit approval.
Deliverable Shape
For containerization plans, provide:
- Runtime and target environment
- Image build strategy
- Runtime configuration
- Security and secret handling
- Healthcheck and logging
- Build/run/test commands
- Registry and release notes
- Open risks
References
- Read
references/containerization-plan-checklist.mdwhen planning or reviewing container setup.