From Dockerfile to production-ready containers
Day 1
Images, Layers & BuildKit
- Image layers & caching: How layer caching works and how to structure Dockerfiles for maximum cache reuse
- Multi-stage builds & minimal images: Separating build and runtime stages to produce lean final images
- BuildKit features & .dockerignore patterns: Leveraging BuildKit's parallel execution, secrets mounts, and cache mounts
- Base image selection & update strategies: Choosing distroless, Alpine, or slim variants and keeping base images current
- Dockerfile best practices for each application type: Patterns for Java, Node.js, Python, and Go applications
- Building Java, Node.js, and Python images correctly: Dependency caching, build artifact separation, and runtime-only final stages
Day 2
Networking, Compose & Security
- Bridge, host, overlay networks: When to use each network driver and how container networking actually works
- Port mapping & container DNS resolution: Publishing ports, custom networks, and service discovery by name
- Docker Compose: Services, volumes, networks, env files — production-grade Compose project structure
- Health checks & restart policies: Writing effective health checks and choosing the right restart policy for each service
- Non-root users, read-only filesystems, capability dropping: Applying the principle of least privilege at container level
- Image scanning with Trivy: Integrating vulnerability scanning into build pipelines and interpreting scan results
- Registry operations: Tagging, pushing, signing basics — managing images in Docker Hub and private registries
What your team walks away with
After two days, participants can confidently build, run, and operate containerized applications — from lean production images to multi-service local environments.
- Build optimized multi-stage images with proper layer caching
- Write production-grade Docker Compose files with health checks and restart policies
- Apply security baselines: non-root, read-only, Trivy scanning
- Push and manage images in private registries with tagging strategies
Book the Docker training
Remote, on-site, or hybrid — available as a standalone module or combined with Kubernetes and container orchestration.
Get in touch