
Use SSH credentials in Docker without baking in private keys
Choose scoped runtime mounts or agent forwarding, use BuildKit SSH mounts during builds, and verify server host keys.
Focused answers for definitions, architecture choices, troubleshooting, pricing, and evaluation.

Choose scoped runtime mounts or agent forwarding, use BuildKit SSH mounts during builds, and verify server host keys.

Check the configured user first, use deliberate build or exec privileges, and avoid turning a non-root runtime into unrestricted root.

Explore a trusted image with a shell, export a stopped container filesystem, or inspect layer history and configuration.

Select a broader context or an explicit named context, and distinguish local paths from stages, images, Git sources and stdin builds.

Find running or stopped containers, inspect useful status fields, and select a deliberate scope before bulk operations.

Choose an explicit host path, distinguish runtime mounts from image copies, and diagnose permissions and file-sharing behavior.

Separate image defaults, container configuration, Compose interpolation, and process-local changes when a variable has an unexpected value.

Choose exec for a running service or run for a disposable command, and understand when attach controls the main process.

Detached mode changes terminal attachment; the main process, stop signals, and restart policy determine the container lifecycle.

Select disposable containers deliberately, understand prune age filters, and preserve data before scheduling cleanup.

Distinguish dangling images from unreferenced images, preserve rollback assets, and keep local cleanup separate from registry retention.

Create a container with the intended command, ports, mounts, and environment, then distinguish a new run from restarting an existing instance.