A guide for running and inspecting Docker containers and Compose services on macOS and Linux. Containers package applications and their dependencies so they can run in an isolated environment.

Use it to start, stop, inspect, and debug containers and Compose stacks, and to manage Colima on macOS.

It helps choose the correct container runtime, preserve existing data, check available storage, and debug local services without making unsafe assumptions.

docker — Skill for Claude Code and Codex by fmind/dot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add fmind/dot --skill docker

Clone the repo

git clone --depth 1 https://github.com/fmind/dot

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/fmind/dot/docker/github.svg)](https://agentmods.dev/skills/fmind/dot/docker)

Your own site

<a href="https://agentmods.dev/skills/fmind/dot/docker"><img src="https://agentmods.dev/badge/skills/fmind/dot/docker/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/fmind/dot/docker"><img src="https://agentmods.dev/badge/skills/fmind/dot/docker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 22 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,013 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00022	$0.01013
Opus 5.5	$0.00009	$0.00405
Sonnet 5.5	$0.00004	$0.00203
Haiku 4.5	$0.00002	$0.00101

Measured today against content hash fe53f28d8ac3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

docker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/docker/SKILL.md · 72 lines

How it starts

The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Docker and Container Runtime Management

Use docker, docker compose, and lazydocker to manage container execution, services, and local debugging. The containerize guide builds, publishes, and signs Python images; trivy scans them for vulnerabilities.

Docker, Compose, and Colima are host prerequisites; workstation tools do not install or start them. Inspect docker context ls before choosing a runtime and pass docker --context <context> on consequential commands; do not change the persistent default just to run a task. Container runs execute project code; reuse authority for the requested workload and resolve missing scope before running untrusted images or consequential workloads. Preserve existing volumes and containers.

Runtime Selection

Linux: use the existing Docker-compatible engine; host daemon installation is outside user-space mise setup.
macOS: use Colima instead of Docker Desktop; read colima for its context, socket, memory, and mount behavior.

Workflow

Verify daemon health and storage budget: confirm the daemon is responsive and check storage footprint before launching workloads. Run dot doctor --headroom before large pulls or builds.
```
docker info --format 'Server={{.ServerVersion}} Driver={{.Driver}} Containers={{.Containers}} Images={{.Images}}'
docker system df
```

Manage Compose stacks: resolve the Compose file and project name first. Use a unique name for a new disposable stack; reuse an existing project's name only when operating that stack is in scope.

docker --context <context> compose -p <project> -f <compose-file> up -d
docker --context <context> compose -p <project> -f <compose-file> ps
docker --context <context> compose -p <project> -f <compose-file> logs --since 15m --tail 100 <service>
docker --context <context> compose -p <project> -f <compose-file> down

Read the full file on GitHub · 72 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today Changed fe53f28d8ac3
9d ago Changed · +2 lines · +7 tokens per session f82c36c26daa
11d ago Changed ed3d0eeb0947
12d ago Changed · -9 lines · -3 tokens per session ec99ec586e90
14d ago Changed · +1 lines 9b24b39a30e4
20d ago Changed · +1 lines 09a9d27282a8
23d ago Changed d604eed0a31f
28d ago Changed 070e22cf13f2
29d ago First seen · 77 lines · 18 tokens per session scan A fcb4f55ff955

Subscribe to this mod's changes

docker is a skill published in the GitHub repository fmind/dot (11 stars, last pushed yesterday), licensed MIT. It adds 22 tokens to every session and 1,013 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-17.

Claude Code Containers DevOps and cloud ai-agents chezmoi dotfiles fish-shell mise

k8s-local

Create and manage local Kubernetes clusters (k3d or kind) and deploy to them with kubectl, helm, helmfile, and skaffold. Use for local k8s cluster setup, dev loops, and debugging.

fmind/dotfiles · 50 tokens

cloud-run

Deploy container services to Google Cloud Run with Artifact Registry, keyless CI identity, Secret Manager, ko, or Dockerfiles.

fmind/dotfiles · 28 tokens

security-scan

Scan repositories with Trivy and gitleaks for vulnerabilities, IaC, secrets, licenses, images, and git history; triage concrete findings.

fmind/dotfiles · 34 tokens

containerize

Build minimal, non-root OCI images — ko for Go or a distroless multi-stage Dockerfile — then scan, sign, and SBOM them. Use when containerizing or packaging an app for deployment.

fmind/dotfiles · 47 tokens

dot-cli

Use the dot CLI (fmind/dotfiles) to verify the environment, pull repos, manage the local k3d cluster, log agent sessions, and prune caches. Use when running or scripting any dot command.