Containerization Plan

Core Workflow

1. Identify app runtime, build process, target environment, ports, volumes, secrets, healthchecks, and deployment constraints.
2. Choose image strategy: base image, multi-stage build, dependency caching, non-root user, filesystem layout, and startup command.
3. Define runtime config: env vars, secrets, volumes, network, healthcheck, resource limits, and logs.
4. Review size, reproducibility, security, and local development needs.
5. Include build, run, smoke test, and publish steps.
6. Flag risks before creating production images.

Safety Rules

• Do not bake secrets, tokens, private keys, or local paths into images.
• Do not run containers as root by default when a non-root runtime is practical.
• Do not publish images or push registries without explicit approval.