agentleFS
WST2002WST2002/claude-code-skills/skills/dockerize-app/SKILL.md

dockerize-app

Skill4 starsChanged 27 days agoMITView on GitHub

Use when asked to dockerize or containerize an app, write or fix a Dockerfile or docker-compose.yml, shrink a large Docker image, speed up slow Docker builds, or run an app with its database locally in containers — Node, Python, Java, Go and others.

  • Reads credentials
  • Installs packages

1 other project uses a version of this.

Adopted by

Most recently taken up by

The file

We split this skill into the rules it gives an agent

3 rules. About 0 are common, 1 is distinctive, and 2 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈1

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 2

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Very specific:

    Write .dockerignore: before the first build.

    line 17
  2. Very specific:

    Write docker-compose.yml: if the app needs services, with health checks and named volumes.

    line 18
  3. Distinctive:

    If Docker is not available to run, say the files are unverified.

    line 45

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Dockerize App

Overview

Produce a small, secure, fast-building image that runs the app exactly as it runs today. Read how the project builds and starts before writing a line, and prove the result by building and running it.

Method

  1. Discover: runtime and version (.nvmrc, engines, python_requires, pom.xml, go.mod), package manager and lockfile, build command, start command, port, required environment variables (.env.example), and services it needs (database, cache). Secrets check: if a .env or similar file in the project holds real-looking credentials (passwords, production hosts, API keys), tell the user in your reply: it must stay out of the image and out of git, and any secret that was ever committed should be rotated. Never use that file in example docker run --env-file commands; use .env.example as the template.
  2. Write the Dockerfile with the rules below. Templates per stack are in templates.md.
  3. Write .dockerignore before the first build.
  4. Write docker-compose.yml if the app needs services, with health checks and named volumes.
  5. Build and run to verify: docker build -t app ., docker run --rm -p <port>:<port> --env-file .env app, then hit the health or home route. Report image size (docker images app).

Rules

RuleWhy
Multi-stage build: build stage with dev tools, slim runtime stageSmaller, fewer vulnerabilities
Pin base image versions (node:22-alpine, not node:latest)Reproducible builds
Copy lockfile and install dependencies before copying sourceDependency layer stays cached
Use the lockfile install command (npm ci, pip install -r, mvn -B package)Exact versions
Run as a non-root userContainer escape is less damaging
No secrets in the image or build args; pass them at runtimeImages get shared and pushed
One process per container; CMD in exec form (["node", "server.js"])Correct signal handling and shutdown
HEALTHCHECK or a compose healthcheckOrchestrators know when it is ready
.dockerignore excludes node_modules, .git, .env, build output, testsFaster context, no leaked files

Output

The Dockerfile, .dockerignore, optional docker-compose.yml, then:

Build: docker build -t <name> .
Run:   docker run --rm -p 3000:3000 --env-file .env <name>
Image size: <size>   Verified: <route> returned <status>

If Docker is not available to run, say the files are unverified.

Common mistakes

  • COPY . . before installing dependencies, so every code change reinstalls everything.
  • Copying .env into the image.
  • Using a full OS image (node:22) for runtime when -slim or -alpine works.
  • App listening on localhost inside the container; it must bind to 0.0.0.0.
  • Compose depends_on without a healthcheck, so the app starts before the database is ready.

Made by Wageesha Tripathi · LinkedIn · Email · More skills

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

Reviews can't be read right now.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.