Master programming syntax, solve interactive challenges & run live code in Syntaxis Explore Arena →

menu_book Course Curriculum (Docker & Containerization) expand_more

Container Fundamentals

images versus containers docker run container lifecycle foreground mode detached mode container logs docker exec docker inspect container naming automatic removal

Dockerfiles

FROM RUN COPY ADD WORKDIR ENV ARG CMD ENTRYPOINT EXPOSE

Image Builds

build context .dockerignore layer caching image tagging image history multi-stage builds minimal base images BuildKit secrets build cache mounts platform builds

Storage

named volumes bind mounts tmpfs mounts volume lifecycle volume inspect read-only mounts backup volume data restore volume data filesystem permissions storage drivers

Networking

bridge network host network none network custom network container DNS published ports port binding address network aliases network isolation network inspect

Compose

compose services compose build compose environment compose env_file compose depends_on compose healthcheck compose networks compose volumes compose profiles compose override files

Security & Resources

rootless mode user directive Linux capabilities no-new-privileges read-only filesystem secrets CPU limits memory limits PID limits vulnerability scanning

Operations

registry login push and pull image digests private registry restart policies health checks docker stats logging drivers prune resources graceful stop

Docker & Containerization / Storage

filesystem permissions

Learn filesystem permissions in Docker & Containerization with a dedicated explanation, a topic-specific example, edge guidance, and a mastery check.

12 min read • Intermediate

docker-039.sh

shell

RUN addgroup -S app && adduser -S app -G app
COPY --chown=app:app . /app
USER app

What to watch

Content source & attribution

Original Syntaxis Content · Original Syntaxis Content

Lesson quizzes

filesystem permissions Mastery Check →

restore volume data

storage drivers