تشغيل أي مهارة في Manus بنقرة واحدة

docker-patterns

النجوم١

التفرعات٠

آخر تحديث١٠ يوليو ٢٠٢٦ في ٠٨:٣٦

Containerization rules for this repo — pinned base image, non-root user, read-only FS, explicit volumes for config and data.

التثبيت

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

تشغيل في Manus

المصدر

strmt7

strmt7/simple_ai_trading

فتح مستودع GitHub عرض مستودعات المنشئ

تنزيل

تشغيل في Manus

المهن ذات الصلةSOC

استنادا إلى تصنيف SOC المهني

مديرو الشبكات وأنظمة الحاسوبمهن الحاسوب والرياضيات·SOC 15-1244

SKILL.md

readonly

name	docker-patterns
description	Containerization rules for this repo — pinned base image, non-root user, read-only FS, explicit volumes for config and data.
origin	adapted from ZMB-UZH/omero-docker-extended docker-patterns

Docker Patterns

Use this skill whenever you touch Dockerfile, docker-compose.yml, .dockerignore, or any runtime-container entrypoint script.

Image baseline

Pin Python to a specific minor version (python:3.12-slim-bookworm). Never use :latest or a floating tag.
The container runs a non-root user with UID/GID 10001. No apt or pip operations at runtime.
The final image should have zero build tools. Install build deps in a throwaway stage if needed, copy only the wheel / site-packages forward.
Declare ENTRYPOINT ["simple-ai-trading"] so docker run image <cmd> works exactly like the local binary.

Compose baseline

Service names are lowercase kebab-case.
Each service sets security_opt: no-new-privileges:true.
Each service declares a healthcheck when it has a reachable endpoint or a meaningful readiness probe.
Env defaults live in Dockerfile ARG or in .env.example, not inline in docker-compose.yml. Compose references ${VAR} with a default via ${VAR:-fallback} only when the fallback is safe for every environment.
Config and data mount as named volumes or as bind mounts with explicit ro / rw flags. Never mount / or $HOME.

What the simple-ai-trading container must not do

Start a live loop by default. Default CMD is shell (interactive) or menu, not live.
Accept a BINANCE_LIVE=1 style env that flips testnet=false. Live real-money mode must remain an explicit CLI flag combination with testnet=true, not a container-level setting.
Bake credentials into the image. Secrets come from mounted ~/.config/simple_ai_trading/runtime.json (mode 0600) or from env vars at runtime.

Verification

docker build -t simple-ai-trading:dev .
docker run --rm simple-ai-trading:dev status
docker run --rm --entrypoint python simple-ai-trading:dev -m pytest -q

Any change to the runtime contract (entrypoint, user, volumes, healthcheck) is a change to operator expectations. Update the README and the .env.example in the same commit.

المزيد من هذا المستودع

نفس المستودع

cocoindex-code-search

strmt7/simple_ai_trading

Use the pinned external CocoIndex Code MCP workflow for broad repository routing, then prove exact candidates with rg and direct file reads.

2026-07-151

context-budget

strmt7/simple_ai_trading

Bound repository context reads and semantic-search output without weakening source, test, or evidence verification.

2026-07-151

ai-regression-testing

strmt7/simple_ai_trading

Choose staged contract tests that catch partial AI-generated fixes across models, data, risk, execution ownership, and CLI/Windows parity.

2026-07-111

docs-knowledge-maintainer

strmt7/simple_ai_trading

Keep concise user docs and machine-readable model evidence synchronized with real behavior without losing provenance or caveats.

2026-07-111

karpathy-guidelines

strmt7/simple_ai_trading

Apply four anti-error coding principles plus this repository's stricter financial-evidence, safety, and single-session rules.

2026-07-111

search-first

strmt7/simple_ai_trading

Research the existing implementation, tests, primary technical sources, and financial rationale before adding trading code or dependencies.

2026-07-111

Docker Patterns

Use this skill whenever you touch Dockerfile, docker-compose.yml, .dockerignore, or any runtime-container entrypoint script.

Image baseline

Pin Python to a specific minor version (python:3.12-slim-bookworm). Never use :latest or a floating tag.

The container runs a non-root user with UID/GID 10001. No apt or pip operations at runtime.

The final image should have zero build tools. Install build deps in a throwaway stage if needed, copy only the wheel / site-packages forward.

Declare ENTRYPOINT ["simple-ai-trading"] so docker run image <cmd> works exactly like the local binary.

Compose baseline

Service names are lowercase kebab-case.

Each service sets security_opt: no-new-privileges:true.

Each service declares a healthcheck when it has a reachable endpoint or a meaningful readiness probe.

Env defaults live in Dockerfile ARG or in .env.example, not inline in docker-compose.yml. Compose references ${VAR} with a default via ${VAR:-fallback} only when the fallback is safe for every environment.

Config and data mount as named volumes or as bind mounts with explicit ro / rw flags. Never mount / or $HOME.

What the simple-ai-trading container must not do

Start a live loop by default. Default CMD is shell (interactive) or menu, not live.

Accept a BINANCE_LIVE=1 style env that flips testnet=false. Live real-money mode must remain an explicit CLI flag combination with testnet=true, not a container-level setting.

Bake credentials into the image. Secrets come from mounted ~/.config/simple_ai_trading/runtime.json (mode 0600) or from env vars at runtime.

Verification

docker build -t simple-ai-trading:dev . docker run --rm simple-ai-trading:dev status docker run --rm --entrypoint python simple-ai-trading:dev -m pytest -q

Any change to the runtime contract (entrypoint, user, volumes, healthcheck) is a change to operator expectations. Update the README and the .env.example in the same commit.