docker-setup

Solid

Host-only, operator-invoked. Generates Docker scaffolding and walks the operator through token setup, build, start, MCP plugin configuration, workspace trust, and verification. Offers to back up and overwrite existing Docker files. Run after /hatch.

AI & Automation 74 stars 15 forks Updated today MIT

Install

View on GitHub

Quality Score: 85/100

Stars 20%
62
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Docker Setup Generate Docker scaffolding for running hermit as an always-on autonomous agent in a container. Docker provides isolation, crash recovery, and a reproducible environment. The default `auto` mode (classifier-reviewed autonomy) works well for most Docker hermits. Operators who need zero prompts for fully unattended operation can opt into `bypassPermissions` via `/hermit-settings permissions`. **Tone:** Friendly guided wizard. Celebrate progress. When something fails, help fix it. **Important:** Step 0's container check is a hard short-circuit — run it first and abort on `container` before anything else. After confirming host execution, run `docker-preflight.ts` once (Step 1) — it gathers all the read-only signals (docker presence, config existence, WSL path, existing docker files, host `~/.gitconfig`, auto-memory seed, a live non-Docker owner of the state dir) as a single JSON blob, so don't fan those probes out into separate Bash calls. Reuse its result for the git-identity (Step 4) and auto-memory (Step 5) decisions rather than re-probing. Step 2's project-dependency scan stays normal file reads (Read tool) plus analysis. Everything that mutates state or drives the container (file backups, `docker compose`, `tmux`, `mkdir`/`touch` setup-mode, status polls, channel `send-keys`) must run strictly sequentially in its documented order — never batch those. Templates live in `${CLAUDE_SKILL_DIR}/../../state-templates/docker/`. ## Plan ### 0. Refuse to run insid...

Details

Author
gtapps
Repository
gtapps/claude-code-hermit
Created
5 months ago
Last Updated
today
Language
TypeScript
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

DevOps & Infrastructure Solid

docker-security

Opt-in advanced Docker security hardening beyond the docker-setup baseline — LAN containment with DNS policy, resource bounds with kernel-hygiene sysctls, and a boot-time plugin install audit log. Applied as a reversible docker-compose overlay (does not touch the base compose file) and verified against the live container. Run after /docker-setup; requires bridge networking.

74 Updated today
gtapps
Code & Development Listed

docker

Scaffolds, operates, reviews and hardens containerized projects - from a cold start or inside an existing repo. Use when containerizing an app, when authoring or editing any Dockerfile/Containerfile/compose file, when inheriting an unfamiliar repo that has one, when a build is slow, an image is fat, or the layer cache never hits, when a container runs as root or leaks secrets into layers, when a container will not start or dies mysteriously (137/OOM, 126, 127), when debugging a container, reclaiming disk, or pushing to a registry, and when reviewing container config before it ships. Also use before granting a container ANY host privilege (Docker socket, privileged, host network, bind-mounting /), which warrants a hard stop. Ships scripts/docker_check.py and drives hadolint and trivy.

0 Updated 2 days ago
thefilesareinthecomputer
Code & Development Listed

docker

Scaffolds, operates, reviews and hardens containerized projects - from a cold start or inside an existing repo. Use when containerizing an app, when authoring or editing any Dockerfile/Containerfile/compose file, when inheriting an unfamiliar repo that has one, when a build is slow, an image is fat, or the layer cache never hits, when a container runs as root or leaks secrets into layers, when a container will not start or dies mysteriously (137/OOM, 126, 127), when debugging a container, reclaiming disk, or pushing to a registry, and when reviewing container config before it ships. Also use before granting a container ANY host privilege (Docker socket, privileged, host network, bind-mounting /), which warrants a hard stop. Ships scripts/docker_check.py and drives hadolint and trivy.

1 Updated 1 weeks ago
anton-winter-arch