Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Build, secure, and deploy Docker containers with image optimization, networking, and production-ready patterns.
Build, secure, and deploy Docker containers with image optimization, networking, and production-ready patterns.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Use when the task involves Docker, Dockerfiles, container builds, Compose, image publishing, networking, volumes, logs, debugging, or production container operations. This skill is stateless and should be applied directly whenever Docker work appears.
TopicFileEssential commandscommands.mdDockerfile patternsimages.mdCompose orchestrationcompose.mdNetworking & volumesinfrastructure.mdSecurity hardeningsecurity.md
python:3.11.5-slim not python:latest Today's latest differs from tomorrow's โ breaks immutable builds
apt-get update && apt-get install -y pkg in ONE layer Separate layers = stale package cache weeks later
Add USER nonroot in Dockerfile Running as root fails security scans and platform policies
-m 512m on every container OOM killer strikes without warning otherwise
Default json-file driver has no size limit One chatty container fills disk and crashes host
Multi-stage builds: forgotten --from=builder copies from wrong stage silently COPY before RUN invalidates cache on every file change โ copy requirements first, install, then copy code ADD extracts archives automatically โ use COPY unless you need extraction Build args visible in image history โ never use for secrets
localhost inside container is container's localhost โ bind to 0.0.0.0 Port already in use: previous container still stopping โ wait or force remove Exit code 137 = OOM killed, 139 = segfault โ check with docker inspect --format='{{.State.ExitCode}}' No shell in distroless images โ docker cp files out or use debug sidecar
Container DNS only works on custom networks โ default bridge can't resolve names Published ports bind to 0.0.0.0 โ use 127.0.0.1:5432:5432 for local-only Zombie connections from killed containers โ set health checks and restart policies
depends_on waits for container start, not service ready โ use condition: service_healthy .env file in wrong directory silently ignored โ must be next to docker-compose.yml Volume mounts overwrite container files โ empty host dir = empty container dir YAML anchors don't work across files โ use multiple compose files instead
Anonymous volumes accumulate silently โ use named volumes Bind mounts have permission issues โ container user must match host user docker system prune doesn't remove named volumes โ add --volumes flag Stopped container data persists until container removed
Dangling images grow unbounded โ docker image prune regularly Build cache grows forever โ docker builder prune reclaims space Stopped containers consume disk โ docker container prune or --rm on run Networks pile up from compose projects โ docker network prune
ENV and COPY bake secrets into layer history permanently โ use secrets mount or runtime env --privileged disables all security โ almost never needed, find specific capability instead Images from unknown registries may be malicious โ verify sources Build args visible in image history โ don't use for secrets
Exit code 137 = OOM killed, 139 = segfault โ check docker inspect --format='{{.State.ExitCode}}' Container won't start: check logs even for failed containers โ docker logs <container> No shell in distroless images โ docker cp files out or use debug sidecar Inspect filesystem of dead container โ docker cp deadcontainer:/path ./local
Install with clawhub install <slug> if user confirms: devops โ deployment pipelines linux โ host system management server โ server administration
If useful: clawhub star docker Stay updated: clawhub sync
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.