DevOps AcademyLearn the delivery system
210 lessons published

Stage 06 · Containers & Platforms

Docker Complete Course

Master Docker from container and image fundamentals through BuildKit, Compose, networking, storage, security, registries, SBOM/provenance, rootless operation, runtime internals, automation, and production troubleshooting.

Browse curriculum View all chapters
DKR
42chapters
210lessons
Beginnerstarting level
Hands-onlearning mode
Course state210 published · 0 planned

Course brief

A complete Docker curriculum from first container to secure production container workflows.

This course is organized as a progressive operational curriculum from fundamentals through advanced production practice. Lesson files are reserved with stable repository paths so content can be added later without changing URLs or navigation.

By the end

You will be able to

  • Understand Docker Engine, OCI images, container isolation, layers, and runtime architecture
  • Build reproducible, cache-efficient, multi-platform images with BuildKit and multi-stage Dockerfiles
  • Design Compose applications, networking, storage, resource controls, and operational health checks
  • Harden containers with least privilege, rootless operation, scanning, SBOMs, and signed provenance
  • Integrate Docker into registries, CI/CD, automation, and production incident-response workflows

Complete syllabus

42 chapters in prerequisite order.

The structure goes beyond command references and feature lists. It includes architecture, security, reliability, troubleshooting, automation, governance, performance, and realistic production workflows.

01

Chapter 1

Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture

5 lessons
01
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker Architecture: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Containers, Virtual Machines, Linux Isolation, OCI Standards, and Docker ArchitecturePublished lesson
Open
02

Chapter 2

Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup

5 lessons
01
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment Setup: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Installing Docker Engine and Desktop, CLI Basics, Daemon Connectivity, Contexts, and Environment SetupPublished lesson
Open
03

Chapter 3

Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle

5 lessons
01
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container Lifecycle: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Engine Components: dockerd, containerd, runc, BuildKit, APIs, and Container LifecyclePublished lesson
Open
04

Chapter 4

Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity

5 lessons
01
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image Identity: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Images, Layers, Content-Addressable Storage, Manifests, Config Objects, and Image IdentityPublished lesson
Open
05

Chapter 5

Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State

5 lessons
01
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle State: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Running Containers: create, run, start, stop, restart, rm, exec, attach, inspect, and Lifecycle StatePublished lesson
Open
06

Chapter 6

Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1

5 lessons
01
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Container Filesystems, Writable Layers, docker cp, exec Workflows, Processes, Signals, and PID 1Published lesson
Open
07

Chapter 7

Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT

5 lessons
01
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINT: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Dockerfile Fundamentals: FROM, RUN, COPY, ADD, WORKDIR, ENV, ARG, USER, CMD, and ENTRYPOINTPublished lesson
Open
08

Chapter 8

Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs

5 lessons
01
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build Inputs: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Build Contexts, .dockerignore, Remote Contexts, Named Contexts, and Deterministic Build InputsPublished lesson
Open
09

Chapter 9

BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows

5 lessons
01
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build Workflows: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — BuildKit and buildx Architecture, Builders, Frontends, Progress, Outputs, and Modern Build WorkflowsPublished lesson
Open
10

Chapter 10

Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation

5 lessons
01
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build Separation: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Multi-Stage Builds, Minimal Runtime Images, Distroless Patterns, Debug Stages, and Build SeparationPublished lesson
Open
11

Chapter 11

Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export

5 lessons
01
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/Export: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Build Cache, Cache Mounts, Bind Mounts, Secret Mounts, SSH Mounts, and Cache Import/ExportPublished lesson
Open
12

Chapter 12

Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery

5 lessons
01
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture Delivery: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Multi-Platform Images, QEMU Emulation, Native Builders, Manifest Lists, and Cross-Architecture DeliveryPublished lesson
Open
13

Chapter 13

Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility

5 lessons
01
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and Reproducibility: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Image Tags, Digests, Mutable vs Immutable References, Pull Policies, Pinning, and ReproducibilityPublished lesson
Open
14

Chapter 14

Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution

5 lessons
01
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and Distribution: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Registries, Docker Hub, Private Registries, Authentication, Credential Stores, Push/Pull, and DistributionPublished lesson
Open
15

Chapter 15

Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle

5 lessons
01
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project Lifecycle: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Compose Foundations: Services, Images, Builds, Networks, Volumes, Environment, and Project LifecyclePublished lesson
Open
16

Chapter 16

Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design

5 lessons
01
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File Design: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Advanced Compose: Profiles, depends_on, Health Conditions, Overrides, Includes, Watch, and Multi-File DesignPublished lesson
Open
17

Chapter 17

Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces

5 lessons
01
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and Namespaces: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Container Networking Foundations: Bridge, Host, None, User-Defined Networks, Endpoints, and NamespacesPublished lesson
Open
18

Chapter 18

Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications

5 lessons
01
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network Applications: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker DNS, Service Discovery, Aliases, IPv4/IPv6, Custom Subnets, and Multi-Network ApplicationsPublished lesson
Open
19

Chapter 19

Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security

5 lessons
01
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure Security: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Port Publishing, NAT, Firewall Interaction, Direct Routing, Host Binding, and Exposure SecurityPublished lesson
Open
20

Chapter 20

Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns

5 lessons
01
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data Patterns: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Volumes, Named Volumes, Volume Drivers, Backup/Restore, Sharing, and Persistent Data PatternsPublished lesson
Open
21

Chapter 21

Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling

5 lessons
01
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host Coupling: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Bind Mounts, Read-Only Mounts, tmpfs, Mount Propagation, Subpaths, SELinux Labels, and Host CouplingPublished lesson
Open
22

Chapter 22

CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance

5 lessons
01
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource Governance: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — CPU, Memory, PIDs, Devices, ulimits, cgroups v2, Reservations, and Container Resource GovernancePublished lesson
Open
23

Chapter 23

Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability

5 lessons
01
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container Observability: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Logs, Logging Drivers, Rotation, stdout/stderr Contracts, Events, stats, and Container ObservabilityPublished lesson
Open
24

Chapter 24

Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns

5 lessons
01
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing Patterns: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Health Checks, Restart Policies, Dependency Health, Graceful Shutdown, Signals, and Self-Healing PatternsPublished lesson
Open
25

Chapter 25

Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries

5 lessons
01
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege Boundaries: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Container Security Model: Namespaces, Capabilities, Seccomp, AppArmor, SELinux, Devices, and Privilege BoundariesPublished lesson
Open
26

Chapter 26

Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction

5 lessons
01
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat Reduction: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Rootless Docker, RootlessKit, User Namespaces, Networking, Storage, Limitations, and Threat ReductionPublished lesson
Open
27

Chapter 27

User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege

5 lessons
01
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least Privilege: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — User Namespace Remapping, UID/GID Mapping, Non-Root Images, Filesystem Ownership, and Least PrivilegePublished lesson
Open
28

Chapter 28

Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores

5 lessons
01
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret Stores: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Secrets and Configuration Patterns, Runtime Injection, Environment Risk, Build Secrets, and External Secret StoresPublished lesson
Open
29

Chapter 29

Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows

5 lessons
01
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation Workflows: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Image Vulnerability Scanning, Dependency Hygiene, Base-Image Maintenance, and Remediation WorkflowsPublished lesson
Open
30

Chapter 30

SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows

5 lessons
01
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification Workflows: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — SBOMs, SPDX/CycloneDX, in-toto Attestations, SLSA Provenance, Signatures, and Verification WorkflowsPublished lesson
Open
31

Chapter 31

Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution

5 lessons
01
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine Evolution: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Containerd Image Store, Snapshotters, Runtime Internals, OCI Runtime Specs, and Docker Engine EvolutionPublished lesson
Open
32

Chapter 32

Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting

5 lessons
01
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage Troubleshooting: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Storage Drivers, overlay2, Copy-on-Write Behavior, Disk Usage, Pruning, and Storage TroubleshootingPublished lesson
Open
33

Chapter 33

Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration

5 lessons
01
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host Integration: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Daemon Configuration, daemon.json, systemd, Proxies, Registry Mirrors, Live Restore, and Host IntegrationPublished lesson
Open
34

Chapter 34

Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients

5 lessons
01
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation Clients: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Engine API, SDKs, Remote Daemons, TLS Authentication, Contexts, and Automation ClientsPublished lesson
Open
35

Chapter 35

Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs

5 lessons
01
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation Tradeoffs: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Socket Security, Docker-in-Docker, Socket Mounting, Build Services, and CI Isolation TradeoffsPublished lesson
Open
36

Chapter 36

Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion

5 lessons
01
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release Promotion: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker in CI/CD: Reproducible Builds, Buildx, Registry Caching, Ephemeral Runners, and Release PromotionPublished lesson
Open
37

Chapter 37

Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity

5 lessons
01
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local Parity: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Developer Workflows, Dev Containers, Inner Loop Optimization, Compose-Based Labs, and Local ParityPublished lesson
Open
38

Chapter 38

Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts

5 lessons
01
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational Contracts: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Production Container Patterns, Immutable Delivery, Configuration, Statelessness, Sidecars, and Operational ContractsPublished lesson
Open
39

Chapter 39

Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support

5 lessons
01
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate Support: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Swarm Fundamentals, Services, Stacks, Secrets, Overlay Networks, Rolling Updates, and Legacy Estate SupportPublished lesson
Open
40

Chapter 40

Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling

5 lessons
01
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource Profiling: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Docker Performance Engineering: Build Speed, Image Size, Runtime Overhead, Network, Storage, and Resource ProfilingPublished lesson
Open
41

Chapter 41

Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents

5 lessons
01
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Concepts, Architecture, and Mental ModelPublished lesson
Open 02
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Guided Hands-On Workflow and Core OperationsPublished lesson
Open 03
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Configuration, Design Choices, and TradeoffsPublished lesson
Open 04
Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container Incidents: Diagnostics, Failure Modes, Security, and PerformancePublished lesson
Open 05
Checkpoint Lab — Troubleshooting Docker: Daemon Failures, Networking, DNS, Storage, Permissions, Builds, and Container IncidentsPublished lesson
Open
42

Chapter 42

Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application

5 lessons
01
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Requirements, Constraints, and Target ArchitecturePublished lesson
Open 02
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Implementation and Automation Build-OutPublished lesson
Open 03
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Security, Governance, and Reliability ValidationPublished lesson
Open 04
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Failure Injection, Troubleshooting, and Recovery DrillPublished lesson
Open 05
Production Capstone: Build, Secure, Publish, Operate, Observe, and Recover a Complete Dockerized Application: Final Operational Review and HandoffPublished lesson
Open

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20
0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0Send only Ethereum/ERC-20 compatible assets to this address.