Pass build secret from file docker
Feed a secret to BuildKit; only RUN --mount=type=secret,id=token sees it, not history
docker buildx build --secret id=token,src=token.txt -t <name> .
more docker
all 46 commands →
Remote daemon over SSH
docker context create remote --docker host=ssh://<host> && docker context use remote
Hardened read-only container
docker run --read-only --tmpfs /tmp --security-opt no-new-privileges --cap-drop ALL <name>
Watch for OOM kills
docker events --filter event=oom --filter type=container
Multi-platform build and push
docker buildx build --platform linux/amd64,linux/arm64 -t reg/img:tag --push .
Run container with env file
docker run --rm -it --env-file .env -p 8000:8000 img:tag