Docker Operator
Overview
Operate Docker with least surprise: inspect before restart, prefer Compose files in-repo, avoid destructive prune unless approved.
Common commands
docker ps -a
docker logs --tail 200 <container>
docker compose ps
docker compose logs -f --tail=100
docker image ls
docker inspect <id>
Workflow
- Confirm context (compose file path, service name).
- Inspect running state and recent logs.
- Reproduce the failure with the smallest command.
- Change config/code → rebuild only what is needed.
- Verify healthchecks / HTTP readiness.
Rules
docker system prune/ volume deletes needhuman-approval.- Do not publish privileged containers unless required and approved.
- Never embed secrets in image layers; use env/secrets.