---
name: docker-production
description: "Production Docker: multi-stage builds, security hardening, BuildKit cache/secrets, Compose Spec, SBOM/provenance/signing, networking, logging, and private registry. Use when writing Dockerfiles, hardening images, debugging containers, or shipping containers to production."
---
# Docker Production

Production Docker patterns. Multi-stage builds that actually minimize image size, security hardening, Compose configs that survive real traffic, and debugging techniques.

---

## Reference guide

Read only the references needed for the current request:

- **1. Multi-Stage Builds**: [references/1-multi-stage-builds.md](references/1-multi-stage-builds.md)
- **2. Security Hardening**: [references/2-security-hardening.md](references/2-security-hardening.md)
- **3. Compose for Production**: [references/3-compose-for-production.md](references/3-compose-for-production.md)
- **4. Secrets Management**: [references/4-secrets-management.md](references/4-secrets-management.md)
- **4b. Supply-Chain: SBOM, Provenance & Signing**: [references/4b-supply-chain-sbom-provenance-signing.md](references/4b-supply-chain-sbom-provenance-signing.md)
- **5. Networking**: [references/5-networking.md](references/5-networking.md)
- **6. Logging**: [references/6-logging.md](references/6-logging.md)
- **7. Debugging Production Containers**: [references/7-debugging-production-containers.md](references/7-debugging-production-containers.md)
- **8. Private Registry**: [references/8-private-registry.md](references/8-private-registry.md)
- **9. When to Graduate from Compose**: [references/9-when-to-graduate-from-compose.md](references/9-when-to-graduate-from-compose.md)
- **10. Production Dockerfile Checklist**: [references/10-production-dockerfile-checklist.md](references/10-production-dockerfile-checklist.md)