Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

docker-patterns

Étoiles1

Forks0

Mis à jour10 juillet 2026 à 08:36

Containerization rules for this repo — pinned base image, non-root user, read-only FS, explicit volumes for config and data.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

strmt7

strmt7/simple_ai_trading

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Administrateurs de réseaux et de systèmes informatiquesProfessions informatiques et mathématiques·SOC 15-1244

SKILL.md

readonly

name	docker-patterns
description	Containerization rules for this repo — pinned base image, non-root user, read-only FS, explicit volumes for config and data.
origin	adapted from ZMB-UZH/omero-docker-extended docker-patterns

Docker Patterns

Use this skill whenever you touch Dockerfile, docker-compose.yml, .dockerignore, or any runtime-container entrypoint script.

Image baseline

Pin Python to a specific minor version (python:3.12-slim-bookworm). Never use :latest or a floating tag.
The container runs a non-root user with UID/GID 10001. No apt or pip operations at runtime.
The final image should have zero build tools. Install build deps in a throwaway stage if needed, copy only the wheel / site-packages forward.
Declare ENTRYPOINT ["simple-ai-trading"] so docker run image <cmd> works exactly like the local binary.

Compose baseline

Service names are lowercase kebab-case.
Each service sets security_opt: no-new-privileges:true.
Each service declares a healthcheck when it has a reachable endpoint or a meaningful readiness probe.
Env defaults live in Dockerfile ARG or in .env.example, not inline in docker-compose.yml. Compose references ${VAR} with a default via ${VAR:-fallback} only when the fallback is safe for every environment.
Config and data mount as named volumes or as bind mounts with explicit ro / rw flags. Never mount / or $HOME.

What the simple-ai-trading container must not do

Start a live loop by default. Default CMD is shell (interactive) or menu, not live.
Accept a BINANCE_LIVE=1 style env that flips testnet=false. Live real-money mode must remain an explicit CLI flag combination with testnet=true, not a container-level setting.
Bake credentials into the image. Secrets come from mounted ~/.config/simple_ai_trading/runtime.json (mode 0600) or from env vars at runtime.

Verification

docker build -t simple-ai-trading:dev .
docker run --rm simple-ai-trading:dev status
docker run --rm --entrypoint python simple-ai-trading:dev -m pytest -q

Any change to the runtime contract (entrypoint, user, volumes, healthcheck) is a change to operator expectations. Update the README and the .env.example in the same commit.

Plus depuis ce dépôt

même dépôt

cocoindex-code-search

strmt7/simple_ai_trading

Use the pinned external CocoIndex Code MCP workflow for broad repository routing, then prove exact candidates with rg and direct file reads.

2026-07-151

context-budget

strmt7/simple_ai_trading

Bound repository context reads and semantic-search output without weakening source, test, or evidence verification.

2026-07-151

ai-regression-testing

strmt7/simple_ai_trading

Choose staged contract tests that catch partial AI-generated fixes across models, data, risk, execution ownership, and CLI/Windows parity.

2026-07-111

docs-knowledge-maintainer

strmt7/simple_ai_trading

Keep concise user docs and machine-readable model evidence synchronized with real behavior without losing provenance or caveats.

2026-07-111

karpathy-guidelines

strmt7/simple_ai_trading

Apply four anti-error coding principles plus this repository's stricter financial-evidence, safety, and single-session rules.

2026-07-111

search-first

strmt7/simple_ai_trading

Research the existing implementation, tests, primary technical sources, and financial rationale before adding trading code or dependencies.

2026-07-111

Docker Patterns

Use this skill whenever you touch Dockerfile, docker-compose.yml, .dockerignore, or any runtime-container entrypoint script.

Image baseline

Pin Python to a specific minor version (python:3.12-slim-bookworm). Never use :latest or a floating tag.

The container runs a non-root user with UID/GID 10001. No apt or pip operations at runtime.

The final image should have zero build tools. Install build deps in a throwaway stage if needed, copy only the wheel / site-packages forward.

Declare ENTRYPOINT ["simple-ai-trading"] so docker run image <cmd> works exactly like the local binary.

Compose baseline

Service names are lowercase kebab-case.

Each service sets security_opt: no-new-privileges:true.

Each service declares a healthcheck when it has a reachable endpoint or a meaningful readiness probe.

Env defaults live in Dockerfile ARG or in .env.example, not inline in docker-compose.yml. Compose references ${VAR} with a default via ${VAR:-fallback} only when the fallback is safe for every environment.

Config and data mount as named volumes or as bind mounts with explicit ro / rw flags. Never mount / or $HOME.

What the simple-ai-trading container must not do

Start a live loop by default. Default CMD is shell (interactive) or menu, not live.

Accept a BINANCE_LIVE=1 style env that flips testnet=false. Live real-money mode must remain an explicit CLI flag combination with testnet=true, not a container-level setting.

Bake credentials into the image. Secrets come from mounted ~/.config/simple_ai_trading/runtime.json (mode 0600) or from env vars at runtime.

Verification

docker build -t simple-ai-trading:dev . docker run --rm simple-ai-trading:dev status docker run --rm --entrypoint python simple-ai-trading:dev -m pytest -q

Any change to the runtime contract (entrypoint, user, volumes, healthcheck) is a change to operator expectations. Update the README and the .env.example in the same commit.