DevOps AcademyLearn the delivery system
Course structure available

Stage 06 · Containers & Platforms

Docker Complete Course

Master Docker from container and image fundamentals through BuildKit, Compose, networking, storage, security, registries, SBOM/provenance, rootless operation, runtime internals, automation, and production troubleshooting.

Browse curriculum View all chapters
DKR
42chapters
210lessons
Beginnerstarting level
Hands-onlearning mode
Course stateCurriculum ready

Course brief

A complete Docker curriculum from first container to secure production container workflows.

This course is organized as a progressive operational curriculum from fundamentals through advanced production practice. Lesson files are reserved with stable repository paths so content can be added later without changing URLs or navigation.

By the end

You will be able to

  • Understand Docker Engine, OCI images, container isolation, layers, and runtime architecture
  • Build reproducible, cache-efficient, multi-platform images with BuildKit and multi-stage Dockerfiles
  • Design Compose applications, networking, storage, resource controls, and operational health checks
  • Harden containers with least privilege, rootless operation, scanning, SBOMs, and signed provenance
  • Integrate Docker into registries, CI/CD, automation, and production incident-response workflows

Complete syllabus

42 chapters in prerequisite order.

The structure goes beyond command references and feature lists. It includes architecture, security, reliability, troubleshooting, automation, governance, performance, and realistic production workflows.

01

Chapter 1

Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture

5 lessons
01
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker ArchitectureReserved in course structure
Planned
02

Chapter 2

Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup

5 lessons
01
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment SetupReserved in course structure
Planned
03

Chapter 3

Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle

5 lessons
01
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container LifecycleReserved in course structure
Planned
04

Chapter 4

Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity

5 lessons
01
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image IdentityReserved in course structure
Planned
05

Chapter 5

Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State

5 lessons
01
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle StateReserved in course structure
Planned
06

Chapter 6

Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1

5 lessons
01
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1Reserved in course structure
Planned
07

Chapter 7

Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT

5 lessons
01
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINTReserved in course structure
Planned
08

Chapter 8

Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs

5 lessons
01
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build InputsReserved in course structure
Planned
09

Chapter 9

BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows

5 lessons
01
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build WorkflowsReserved in course structure
Planned
10

Chapter 10

Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation

5 lessons
01
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build SeparationReserved in course structure
Planned
11

Chapter 11

Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export

5 lessons
01
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/ExportReserved in course structure
Planned
12

Chapter 12

Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery

5 lessons
01
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture DeliveryReserved in course structure
Planned
13

Chapter 13

Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility

5 lessons
01
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and ReproducibilityReserved in course structure
Planned
14

Chapter 14

Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution

5 lessons
01
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and DistributionReserved in course structure
Planned
15

Chapter 15

Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle

5 lessons
01
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project LifecycleReserved in course structure
Planned
16

Chapter 16

Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design

5 lessons
01
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File DesignReserved in course structure
Planned
17

Chapter 17

Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces

5 lessons
01
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and NamespacesReserved in course structure
Planned
18

Chapter 18

Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications

5 lessons
01
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network ApplicationsReserved in course structure
Planned
19

Chapter 19

Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security

5 lessons
01
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure SecurityReserved in course structure
Planned
20

Chapter 20

Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns

5 lessons
01
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data PatternsReserved in course structure
Planned
21

Chapter 21

Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling

5 lessons
01
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host CouplingReserved in course structure
Planned
22

Chapter 22

CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance

5 lessons
01
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource GovernanceReserved in course structure
Planned
23

Chapter 23

Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability

5 lessons
01
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container ObservabilityReserved in course structure
Planned
24

Chapter 24

Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns

5 lessons
01
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing PatternsReserved in course structure
Planned
25

Chapter 25

Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries

5 lessons
01
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege BoundariesReserved in course structure
Planned
26

Chapter 26

Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction

5 lessons
01
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat ReductionReserved in course structure
Planned
27

Chapter 27

User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege

5 lessons
01
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least PrivilegeReserved in course structure
Planned
28

Chapter 28

Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores

5 lessons
01
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret StoresReserved in course structure
Planned
29

Chapter 29

Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows

5 lessons
01
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation WorkflowsReserved in course structure
Planned
30

Chapter 30

SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows

5 lessons
01
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification WorkflowsReserved in course structure
Planned
31

Chapter 31

Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution

5 lessons
01
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine EvolutionReserved in course structure
Planned
32

Chapter 32

Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting

5 lessons
01
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage TroubleshootingReserved in course structure
Planned
33

Chapter 33

Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration

5 lessons
01
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host IntegrationReserved in course structure
Planned
34

Chapter 34

Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients

5 lessons
01
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation ClientsReserved in course structure
Planned
35

Chapter 35

Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs

5 lessons
01
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation TradeoffsReserved in course structure
Planned
36

Chapter 36

Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion

5 lessons
01
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release PromotionReserved in course structure
Planned
37

Chapter 37

Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity

5 lessons
01
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local ParityReserved in course structure
Planned
38

Chapter 38

Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts

5 lessons
01
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational ContractsReserved in course structure
Planned
39

Chapter 39

Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support

5 lessons
01
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate SupportReserved in course structure
Planned
40

Chapter 40

Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling

5 lessons
01
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource ProfilingReserved in course structure
Planned
41

Chapter 41

Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents

5 lessons
01
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Concepts, Architecture, and Mental ModelReserved in course structure
Planned
02
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Guided Hands-On Workflow and Core OperationsReserved in course structure
Planned
03
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Configuration, Design Choices, and TradeoffsReserved in course structure
Planned
04
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure
Planned
05
Checkpoint Lab — Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container IncidentsReserved in course structure
Planned
42

Chapter 42

Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application

5 lessons
01
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Requirements, Constraints, and Target ArchitectureReserved in course structure
Planned
02
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Implementation and Automation Build-OutReserved in course structure
Planned
03
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Security, Governance, and Reliability ValidationReserved in course structure
Planned
04
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Failure Injection, Troubleshooting, and Recovery DrillReserved in course structure
Planned
05
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Final Operational Review and HandoffReserved in course structure
Planned

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20
0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0Send only Ethereum/ERC-20 compatible assets to this address.