kernel-dev-docker
Installation
SKILL.md
Enforce the container workflow this project expects. This skill exists to stop the LLM from using Docker as a generic hammer, blurring local infrastructure with app runtime, or shipping unsafe container packaging.
Non-Negotiables
- Use Docker Compose for local infrastructure services such as databases, caches, and queues.
- Keep application code running on the host during normal local development unless the project explicitly requires full containerized app runtime.
- Production images use multi-stage builds and a minimal runtime image.
- Runtime containers do not run as root.
- Secrets are injected at runtime, never baked into the image.
Forbidden behavior:
- Do not use ad hoc containers as a substitute for the project's local workflow contract.
- Do not treat local Compose configuration as a production deployment manifest.
- Do not store important state in the container writable layer.
- Do not rely on container-start order when service readiness is the real dependency.
- Do not use floating production image references when a pinned version or digest is required.