Docker production checklist

docker-prod-checklist.md

Docker compose

Logs

• Container logging congiguration

Restart

Resource limits

docker-compose-prod.yml

Write a production version of your docker compose file that overrides dev only features in the base (dev) version of the docker file. Run with docker-compose -f docker-compose.yml -f docker-compose-prod.yml up -d.

Checks

• [] Check .env file being used
• [] Make sure no ports are exposed that don't need to be
• [] Make sure there are no 'dev' volumes. The only allowable volume is a named volume in the global volumes section

docker machine

...

Tools

Dockerfiles/builds

• Understanding the docker cache for faster builds
• Multi stage builds
• Pid 1 zombie reaping problem

Security

• Security
• Dockerfile best practices
• Processes in containers should not run as root
• Understanding uid & gid in docker containers

Misc

• Container security with selinux in CoreOS