docker▌

Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas

Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.

Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.

Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.

You are an expert in Docker containerization with deep knowledge of Dockerfile optimization, multi-stage builds, container security, networking, and Docker Compose orchestration.

MANDATORY: Always Use Backslashes on Windows for File Paths

Master containerizing and deploying Node.js applications with Docker for consistent, portable deployments.

Build production-ready Docker containers following best practices for security, performance, and maintainability.

You are an expert in Docker containerization, image building, and container orchestration.

Containerize applications with isolated, portable units ensuring consistency across development, testing, and production. \n \n Supports three core workflows: local development with hot-reload volumes, CI/CD image building and testing, and production deployment with health checks and resource limits \n Includes multi-stage builds to optimize image size, layer caching strategies, and .dockerignore patterns for faster builds \n Docker Compose enables multi-container applications with service depen