Check containers periodically to see if they are running properly.

The hosts process namespace should not be shared by containers

The hosts process namespace should not be shared by containers

Leaving the last user as root can cause security risks. Change to another user after running the commands the need privileges

Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.

Container should not share the host network namespace

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working