dockerSecurity
docker run --cap-drop ALL --cap-add NET_BIND_SERVICE nginx:latestCommand Index
Commands are extracted from fenced code examples across all guides and linked back to their source sections.
docker run --cap-drop ALL --cap-add NET_BIND_SERVICE nginx:latestdocker run --memory 256m --cpus 0.5 nginx:latestdocker run --read-only --tmpfs /tmp:rw,noexec,nosuid,size=64m nginx:latestdocker run --rm -v /var/run/docker.sock:/var/run/docker.sockdocker run --user 10001:10001 nginx:latestdocker run -ddocker run -ddocker run -ddocker run -ddocker run -d -p 80:80 nginxdocker run -d -p 8080:80 --name my-nginx nginxdocker run -p 8081:80 nginxdocker run nginxdocker builder prunedocker container prunedocker image prune -adocker image prune -adocker inspect web --format '{{json .HostConfig.SecurityOpt}} {{json .HostConfig.CapDrop}} {{json .HostConfig.ReadonlyRootfs}}'docker ps --filter "status=running" --filter "name=prod-*"docker system prune -adocker system prune -adocker system prune -a --volumesdocker system prune -a --volumesdocker system prune -a --volumesdocker system prune -afdocker system prune -afdocker volume prunedocker volume prunedocker volume pruneaws ec2 describe-instances --filters "Name=instance-state-name,Values=running"aws ec2 run-instancesaws ec2 run-instancesaws ecs run-taskaz pipelines run --name PIPELINE_NAMEaz vm run-command invokeaz webapp create --resource-group rg-demo-eastus --plan plan-web --name web-demo-143it --runtime 'NODE:20-lts'docker {docker builddocker build -t ${imageName}:${tag} .docker build -t myapp:${{ github.sha }} .docker build -t myapp:latest .docker build -t myapp:v1 .docker build -t myapp:v1.0 --build-arg NODE_ENV=production .docker build -t myregistry.azurecr.io/backend:v1.0 ./backenddocker build -t myregistry.azurecr.io/frontend:v1.0 ./frontenddocker compose builddocker compose build --no-cachedocker compose build webdocker compose downdocker compose down --rmi alldocker compose down -vdocker compose logsdocker compose logs --tail=100docker compose logs -f webdocker compose updocker compose up -d --builddocker compose up -d --scale worker=3 api workerdocker cp ./config.json my-container:/app/config/docker cp my-container:/app/data ./backup/docker cp my-container:/app/logs/app.log ./local-logs/docker events --filter container=my-containerdocker exec -it container-id bashdocker exec -it my-container /bin/bashdocker exec container1 ping container2docker exec my-container ls /appdocker exec postgres-db pg_dump -U postgres mydb > backup.sqldocker export my-container > container.tardocker history myapp:latestdocker image inspect nginx:latest --format '{{json .Config.User}} {{json .Config.Entrypoint}} {{json .Config.Cmd}}'docker imagesdocker inspect container-iddocker inspect container-namedocker inspect my-containerdocker load < myapp.tardocker logs --tail 100 -f production-apidocker logs -f --timestamps my-appdocker logs container-iddocker logs container-iddocker logs container-iddocker logs container-namedocker logs my-containerdocker network connect app-network my-containerdocker network create --driver bridge --subnet 172.20.0.0/16 app-networkdocker network create my-networkdocker network inspect app-networkdocker network inspect network-namedocker psdocker psdocker ps -a --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"docker pull myregistry.azurecr.io/myapp:v2.1.0docker pull nginxdocker pull nginxdocker pull nginx@sha256:REPLACE_WITH_DIGESTdocker pull postgres:15.2-alpinedocker push ${imageName}:${tag}docker push myregistry.azurecr.io/backend:v1.0docker push myregistry.azurecr.io/frontend:v1.0docker push myregistry.io/myapp:v1.0.0docker restart $(docker ps -q --filter "name=prod-")docker rm -f my-containerdocker rm $(docker ps -aq -f status=exited)docker rm container-iddocker rm my-containerdocker rmi $(docker images -f "dangling=true" -q)docker rmi image-iddocker save myapp:latest > myapp.tardocker statsdocker statsdocker stop -t 30 my-appdocker stop container-iddocker stop my-containerdocker system dfdocker system dfdocker system dfdocker tag myapp:latest myregistry.io/myapp:v1.0.0docker top my-containerdocker volume create my-datadocker volume inspect my-datadocker volume lsgit bisect run npm testgit fetch --prunegit pull --prunehelm install my-app ./my-chart --dry-run --debugkubectl apply -f deployment.yaml --dry-run=clientkubectl apply -f deployment.yaml --dry-run=serverkubectl create deployment nginx --image=nginx --dry-run=client -o yaml > deployment.yamlkubectl create namespace production --dry-run=client -o yaml |kubectl create secret docker-registry regcredkubectl create secret docker-registry regcredkubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}{"/"}{.metadata.name}{" user="}{.spec.securityContext.runAsUser}{"\n"}{end}'kubectl run -it --rm debug --image=busybox --restart=Never -- nslookup kubernetes.defaultkubectl run -it --rm debug --image=busybox --restart=Never -- wget -O- <service-name>kubectl run -it --rm debug --image=nicolaka/netshoot --restart=Never -- bashkubectl run -it busybox --image=busybox --rm -- shkubectl run curl -n production --rm -it --image=curlimages/curl -- shkubectl run curl-test --rm -it --image=curlimages/curl -- curl -I http://SERVICE_NAME.NAMESPACE.svc.cluster.localkubectl run dns-test --rm -it --image=busybox:1.36 -- nslookup kubernetes.defaultkubectl run nginx --image=nginxkubectl run nginx --image=nginxkubectl run nginx --image=nginx --dry-run=client -o yaml > pod.yamlkubectl run nginx --image=nginx:1.21 --port=80 --labels=app=webkubectl run smoke-test --rm -i --restart=Nevernetstat -an | grep PORT_NUMBERnpm run buildnpm run buildnpm run lintnpm run start &npm run test:allsystemctl list-units --type=service --state=running