Docker

Actionable walkthroughs on containerization, multi-stage builds, microservices orchestration, container networking, and DevOps pipelines.

Docker 1 🐳 Containerization Fundamentals: Containers vs Virtual Machines (VMs)Docker 2 🐳 Docker Engine Architecture: Daemon (dockerd), CLI (docker), containerd, and runC Docker 3 🐳 Linux Kernel Isolation Mechanics: Namespaces (PID, NET, MNT, IPC, UTS, USER)Docker 4 🐳 Resource Control and Limits: Linux Control Groups (cgroups v1 vs cgroups v2)Docker 5 🐳 Installing Docker Engine on Linux, macOS, and Windows (WSL2 Architecture)Docker 6 🐳 Docker CLI Core Commands: docker run, docker ps, docker stop, docker rm Docker 7 🐳 Managing Container Lifecycles: Pause, Unpause, Restart, and Signal Handling (SIGTERM, SIGKILL)Docker 8 🐳 Container Exec, Logs, and Interactive Shells: docker exec, docker logs, docker attach Docker 9 🐳 Inspecting Container Metadata: docker inspect, docker stats, and docker top Docker 10 🐳 Understanding Container File Systems: Read-Only Layers, Copy-on-Write (CoW), and Ephemeral Storage Docker 11 🐳 Docker Images Fundamentals: Image Manifests, Content Addressable Storage, and Layers Docker 12 🐳 Pulling, Tagging, and Pushing Images to Docker Hub and Private Registries Docker 13 🐳 Writing your First Dockerfile: FROM, RUN, CMD, and ENTRYPOINT Mechanics Docker 14 🐳 CMD vs ENTRYPOINT: Exec Form vs Shell Form and Override Behaviors Docker 15 🐳 Managing Files inside Dockerfiles: COPY vs ADD (Auto-extraction & Remote URLs)Docker 16 🐳 Setting Environment Variables and Working Directories: ENV, ARG, and WORKDIR Docker 17 🐳 Container User Security: USER Instruction and Running as Non-Root Docker 18 🐳 Exposing Ports and Network Metadata: EXPOSE vs Host Port Mapping (-p)Docker 19 🐳 Docker Build Context Optimization and .dockerignore Best Practices Docker 20 🐳 Caching Mechanisms in Docker Builds: Layer Reuse and Cache Busting Strategies Docker 21 🐳 Multi-Stage Builds: Reducing Image Sizes from Gigabytes to Megabytes Docker 22 🐳 Multi-Stage Pattern: Building Standalone Go, Rust, or Node.js Binaries for Distroless/Scratch Docker 23 🐳 Minimal Base Images Comparison: alpine, debian-slim, scratch, and distroless Docker 24 🐳 Advanced Buildkit Features: Secret Mounts (--mount=type=secret) and SSH Forwarding Docker 25 🐳 BuildKit Cache Mounts: Accelerating Package Manager Caches (npm, pip, apt, cargo)Docker 26 🐳 Persistent Storage Overview: Bind Mounts vs Docker Volumes vs tmpfs Docker 27 🐳 Managing Docker Volumes: docker volume create, inspect, ls, and prune Docker 28 🐳 Volume Drivers and Storage Plugins: Local, NFS, and Cloud-Native Storage Docker 29 🐳 Read-Only Containers (--read-only) and Mounting Temporary In-Memory File Systems Docker 30 🐳 Storage Drivers Deep Dive: Overlay2 Architecture, Inodes, and Performance Benchmarks Docker 31 🐳 Container Networking Architecture: Bridge, Host, None, and Macvlan Drivers Docker 32 🐳 Default Bridge Network vs User-Defined Bridge Networks and DNS Resolution Docker 33 🐳 Host Networking (--net=host): Performance, Security, and Port Collisions Docker 34 🐳 Macvlan and IPvlan Networks: Exposing Containers directly to Physical LAN Subnets Docker 35 🐳 Container Port Forwarding Mechanics: iptables Rules, NAT, and docker-proxy Docker 36 🐳 Container Healthchecks: HEALTHCHECK Instruction, Exit Codes, and Auto-healing Policies Docker 37 🐳 Restart Policies: no, on-failure, always, and unless-stopped Docker 38 🐳 Container Resource Allocations: CPU Shares, CPU Quotas (--cpus), and Memory Limits (--memory)Docker 39 🐳 Out-Of-Memory (OOM) Killer Behaviors and OOM Score Adjustments in Containers Docker 40 🐳 Introduction to Docker Compose: Multi-Container Orchestration via Declarative YAML Docker 41 🐳 Docker Compose Specification: services, networks, volumes, and environment Docker 42 🐳 Service Dependencies and Startup Ordering: depends_on with Healthcheck Conditions Docker 43 🐳 Scaling Compose Services, Dynamic Load Balancing, and Environment Variable Substitution Docker 44 🐳 Docker Compose Profiles, Overrides (docker-compose.override.yml), and Inheritance Docker 45 🐳 Managing Microservices Environments locally with Docker Compose and Live Reloading Docker 46 🐳 Container Logging Drivers: json-file, journald, syslog, fluentd, and Log Rotation Policies Docker 47 🐳 Centralized Log Aggregation: Shipping Docker Container Logs to ELK / Grafana Loki Docker 48 🐳 Monitoring Containers with Prometheus, cAdvisor, and Grafana Dashboards Docker 49 🐳 Docker Daemon Configuration: Customizing /etc/docker/daemon.json Docker 50 🐳 Docker Cleanup Automation: docker system prune, Image Pruning, and Disk Space Audits Docker 51 🐳 Docker Image Vulnerability Scanning: Trivy, Grype, and Docker Scout Docker 52 🐳 Container Security Hardening: Dropping Linux Capabilities (--cap-drop=ALL)Docker 53 🐳 Enforcing Linux Security Modules: AppArmor Profiles and SELinux Labels for Containers Docker 54 🐳 Restricting System Calls: Custom Seccomp Profiles in Docker Engine Docker 55 🐳 User Namespaces Mapping (userns-remap): Mapping Container Root to Host Unprivileged User Docker 56 🐳 Container Image Signing and Verification: Docker Content Trust (DCT) and Cosign Docker 57 🐳 Rootless Docker Architecture: Running Docker Engine without Root Privileges Docker 58 🐳 Secret Management in Docker Compose and Swarm: Avoiding Hardcoded Environment Credentials Docker 59 🐳 Multi-Platform Image Builds: docker buildx and QEMU Cross-Compilation Architecture Docker 60 🐳 Creating Open Container Initiative (OCI) Multi-Arch Manifest Lists (amd64, arm64)Docker 61 🐳 Setting Up Private Container Registries: Harbor, Nexus, and Docker Registry Server Docker 62 🐳 Private Registry Authentication, TLS Encryption, and Garbage Collection Docker 63 🐳 Docker Swarm Architecture: Manager Nodes, Worker Nodes, and Raft Consensus Protocol Docker 64 🐳 Swarm Service Deployment: Tasks, Replicas, Global Mode, and Rolling Updates Docker 65 🐳 Swarm Overlay Networks: VXLAN Encapsulation and Ingress Routing Mesh Docker 66 🐳 Swarm Secrets and Configs: Native Encrypted State Distribution Across Cluster Nodes Docker 67 🐳 High Availability Homelab / Server Deployment with Docker Swarm and Portainer Docker 68 🐳 Transitioning from Docker Compose to Kubernetes: Objects, Pods, and Architecture Differences Docker 69 🐳 Translating Compose Manifests to Kubernetes Objects using kompose Docker 70 🐳 containerd CLI Integration: Interacting directly via ctr and nerdctl Docker 71 🐳 Open Container Initiative (OCI) Specifications: Image Spec, Runtime Spec, and Distribution Spec Docker 72 🐳 Alternative Container Runtimes: CRI-O, Podman (Podman vs Docker Differences)Docker 73 🐳 Podman Desktop, Rootless Pods, and Generating Kubernetes Manifests from Pods Docker 74 🐳 Sandboxed & Secure Runtimes: gVisor (runsc) and Kata Containers (MicroVM Isolation)Docker 75 🐳 Docker API: Interacting with Docker Engine Daemon REST API via HTTP / Unix Socket Docker 76 🐳 Automating Docker Management using Python (docker-py) and Go SDK Docker 77 🐳 Custom Docker CLI Plugins: Extending Docker Functionality with Custom Binaries Docker 78 🐳 Containerizing Database Engines: PostgreSQL, MySQL, Redis (Persisting Data & Performance)Docker 79 🐳 Containerizing Web Servers and Reverse Proxies: Nginx, Caddy, and Traefik Dynamic Routing Docker 80 🐳 Containerizing Node.js, Express, and Fastify Applications for Production Docker 81 🐳 Containerizing Python, FastAPI, and Django Applications with Gunicorn/Uvicorn Docker 82 🐳 Containerizing Compiled Applications: Go, Rust, and C++ Binaries Docker 83 🐳 Local Development Stacks: Dev Containers (.devcontainer) and VS Code Integration Docker 84 🐳 Continuous Integration Pipelines: Building and Testing Docker Images in GitHub Actions Docker 85 🐳 CI/CD Pipeline Caching: GitHub Actions Cache Layer Optimization for Docker Docker 86 🐳 Docker-in-Docker (DinD) vs Docker-outside-of-Docker (DooD) in CI Runners Docker 87 🐳 GitOps Workflows for Container Deployments using Watchtower and ArgoCD Docker 88 🐳 Reverse Proxying Docker Containers with Automatic SSL/TLS via Traefik & Let's Encrypt Docker 89 🐳 Backup and Disaster Recovery Strategies for Docker Volumes and Container States Docker 90 🐳 Networking Deep Dive: Packet Flow Tracking through iptables, NAT, and veth Pairs Docker 91 🐳 Debugging Networking Issues: tcpdump, nsenter, and Inspecting Container Network Namespaces Docker 92 🐳 Storage Performance Tuning: I/O Bottlenecks, Direct I/O, and Benchmark Tooling inside Containers Docker 93 🐳 Kernel Resource Auditing: Tracing System Calls inside Containers using strace and eBPF Docker 94 🐳 Debugging Ephemeral / Crashed Containers: Debugging Distroless Containers with Ephemeral Containers Docker 95 🐳 Reverse Engineering Docker Images: Extracting Dockerfiles using dive and Layer Inspection Docker 96 🐳 Docker Engine Benchmarking: CIS Docker Benchmark Verification and Compliance Auditing Docker 97 🐳 High-Performance Docker Host Tuning: Kernel Sysctl Parameters, File Descriptors, and Ephemeral Ports Docker 98 🐳 Building Custom OCI Compliant Runtimes or Custom Images from Scratch Docker 99 🐳 Zero-Downtime Rolling Deployments and Blue-Green Container Deployment Patterns Docker 100 🐳 Docker Master Class: Hand-Tracing a Packet from Physical NIC through Bridge to Container App Core Docker 101 🐳 Cheatsheet

Programming | Docker | Tools & Build Systems

Docker 101 🐳 Cheatsheet
ByKandZ October 22, 2026October 22, 2026

A quick-reference for Docker commands, concepts, and internals. Organized for lookup, not for reading. Container Lifecycle Command Purpose docker run <image> Create + start container docker run -d <image> Detached (background) docker run -it <image> sh Interactive with TTY docker run –rm <image> Auto-remove on exit docker run –name foo <image> Named container docker start…

Read More Docker 101 🐳 Cheatsheet