Top 8 Docker Best Practices for using Docker in Production

Thanks!! It’s very helpful even in 2025 and will remain the same forever.

I have been following these practices over the years. But it is nice to see them all spelled out in one place. Good work!

What is the image layer?

I've read and heard many times about dockerfile commands and directives creating layers, and caching, and mounting into a container. But I don't think that really defines what an image layer is.

Actually, this is the previous question, and the question that interests me now is: Why are fewer levels better and is this true for all cases (I have doubts)?

Extremely helpful best practices Nana, thank you. In my case, the image layers example you illustrated was particularly informative.

Thanks

Alpine is lean alright but from experience, I tend to steer clear from it.

Nice

For somebody they are: 8x not use docker anyway😊 for us it is life style and best working practices 😅

There is no way that I can appreciate what you have done here. These free courses for Docker and other things cost thousands of dollars.

I love the video. You might mention "FROM scratch" to keep the docker image slim.

good content

Timeless! thanks, Nana.

🎉

Nice explanation 👍

You did it great. Thank you for sharing

Thank you Nana ..!! Best video for docker best practice explanation .

Very helpful

I don’t think you mentioned about multi stage docker where in first stage you chose base image which is rich in everything no matter its size and use that alias in another stage with —from alias clause !

Reminders for the World: 1) Create a Nobel price of "DevOps" and 2) Deserve it immediately to Nana for her great work on YT ;). So, thank you Nana and best wishes for your carreer ;).

Great lecture thank you for sharing!

Thank you so much!

Really helpul, nicely explained things,
Loved the video... :)

Hey Nana, I really like this video! You are awesome! Thanks for this. If feedback is allowed: I only disagree majorly on Part3, Calling Alpine "security-oriented" is not true and a well proven fact, that Alpine images report 0 CVE and such, because Alpine only pulished CVEs after they fixed it, other images like Debian and Ubuntu might be bigger, but at least they are honest and dont lie about IT-Security regarding their images ... This is especially hard for people who are working with Ruby on Rails, so often the DEVS in a company have to track all CVEs and remind Alpine to finally fix them. You might have 10 CVEs in a Debain or Ubuntu images as an example but at least they are honest, you know of it you can try to fix it and you know what you get yourself into .... While on Alpine with this shady shadow it approach you never now on what and how many exploding or already exploded bombs you are sitting because they just are not transparent about stuff like that. Thats why Alpine is considered Bad-Practice for production. Ive seen many IT-Sec and DevSecOps talks regarding image security and almost all of them recommend to "not" use Alpine.

Thank you!

really great video

update: docker scan ---> docker scout

Thank you for the easy explaination!

👍❤

such a great content, thanks

maybe would have been a good opportunity to clear up that myth that "docker tags are immutable" even though they might look like semver and "docker tags make '''reproducible''' build" (reproducible vs repeatable)

I want to execute file creation when building an image. so I assigned appropriate permission, yet the user account can not create the file during the docker build. What do you recommend for me

Coming here to see the recommendation to use podman or at least rootless container :P

Awesome... Can you please create one video for Jenkins pipeline code for best practices.

Thanks a lot. This information is very valuable.

WOW!!

very useful video, thanks

excellent explanation for caching layer. Ty!

For the third tip, I would recomend Google's distroless images!

This is great. Thank you!

great video! Learned a few things :)

Thanks!

Awesome. Extremely useful best practices summary. And it is so clearly explained that if you don´t understand it, probably you have to think in changing your career.

i love u nana

She is amazing!!! Beautiful and smart!

As a good practice, is it safe to run docker prune in production e.g. setting up an event that runs command to do docker prune automatically on prod instances?

🙏👍

great video

One quick note. For Image caching you have to use immuteable tags/layers. Otherwise a for example when a cached latest tag is used and never get updated. To be more precise you can also use the layers/image digest instead of a tag.

@Nana As always: Great videos! :)