Docker容器化最佳实践指南：生产就绪容器构建、安全优化与CI/CD部署

docker-containerization by aj-geddes/useful-ai-prompts

237 周安装量

141 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill docker-containerization

自动化云服务开发运维

🇨🇳中文介绍

Docker 容器化

概述

遵循安全性、性能和可维护性的最佳实践，构建生产就绪的 Docker 容器。

使用场景

为部署而容器化应用程序
为新服务创建 Dockerfile
优化现有容器镜像
设置开发环境
构建 CI/CD 容器流水线
实现微服务

快速开始

最小化工作示例：

# Multi-stage build for Node.js application
# Stage 1: Build
FROM node:18-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
RUN npm run build

# Stage 2: Production
FROM node:18-alpine
WORKDIR /app
# Copy only production dependencies and built files
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/dist ./dist
COPY package*.json ./

# Security: Run as non-root user
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
USER nodejs

EXPOSE 3000
CMD ["node", "dist/index.js"]

参考指南

references/ 目录下的详细实现：

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

指南	内容
多阶段构建	多阶段构建
优化技术	优化技术
安全最佳实践	安全最佳实践，环境配置
多容器 Docker Compose	多容器 Docker Compose
.dockerignore 文件	.dockerignore 文件
Python	Python (Django/Flask), Java (Spring Boot), Go

🇺🇸English

Docker Containerization

Overview
When to Use
Quick Start
Reference Guides
Best Practices

Overview

Build production-ready Docker containers following best practices for security, performance, and maintainability.

When to Use

Containerizing applications for deployment
Creating Dockerfiles for new services
Optimizing existing container images
Setting up development environments
Building CI/CD container pipelines
Implementing microservices

Quick Start

Minimal working example:

# Multi-stage build for Node.js application
# Stage 1: Build
FROM node:18-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
RUN npm run build

# Stage 2: Production
FROM node:18-alpine
WORKDIR /app
# Copy only production dependencies and built files
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/dist ./dist
COPY package*.json ./

# Security: Run as non-root user
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
USER nodejs

EXPOSE 3000
CMD ["node", "dist/index.js"]

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Multi-Stage Builds	Multi-Stage Builds
Optimization Techniques	Optimization Techniques
Security Best Practices	Security Best Practices, Environment Configuration
Docker Compose for Multi-Container	Docker Compose for Multi-Container
.dockerignore File	.dockerignore File
Python	Python (Django/Flask), Java (Spring Boot), Go

Best Practices

✅ DO

Use official base images
Implement multi-stage builds
Run as non-root user
Use .dockerignore
Pin specific versions
Include health checks
Scan for vulnerabilities
Minimize layers
Use build caching effectively

❌ DON'T

Use 'latest' tag in production
Run as root user
Include secrets in images
Create unnecessary layers
Install unnecessary packages
Ignore security updates
Store data in containers

Weekly Installs

196

Repository

aj-geddes/usefu…-prompts

GitHub Stars

116

First Seen

Jan 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

opencode154

codex146

gemini-cli146

cursor141

claude-code138

github-copilot127