Keep SQLite data in a private child directory, not at the Docker volume root
Mounting a durable volume straight onto the directory you chmod’d in the image throws away that permission — bake a private child path instead.
Containers
Splitting one Dockerfile into API and maintenance images
A shared runtime stage plus two build targets keeps CLI maintenance tools out of the deployed API image, and a script proves it on every build.
Docker from Scratch: Advanced Dockerfile Patterns
Conditional builds with ARG, health checks, cross-platform images, linting, and other Dockerfile patterns for production use.
Docker from Scratch: Secure Your Containers With Non-Root Users
Run containers as non-root users, choose minimal base images, and keep secrets out of your Docker layers.
Docker from Scratch: Shrink Your Images With Multi-Stage Builds
Use multi-stage Dockerfiles to separate build tooling from your runtime image, cutting image size by 90% or more.
Docker from Scratch: Writing Your First Dockerfile
Learn Dockerfile basics — FROM, COPY, RUN, CMD — and build your first container image.
Docker from Scratch: Build Production-Ready Containers
A five-part series covering Dockerfiles from first principles to production-ready patterns.